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ABSTRACT 



A literature survey concerning the problem of measuring 
safety performance was accomplished with primary emphasis to 
the problem of evaluating occupational injury and illnesses 
safety performance. 

Having accomplished this survey a new methodology for 
measuring occupational safety performance is proposed based 
on "cost" criterion. 

Finally an analysis of real safety occupational data is 
accomplished since analysis of safety data is considered to 
be a basic step of the proposed methodology. 
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INTRODUCTION 



I . 

Although safety is generally recognized as an essential 
part in overall system operation, incorporation of safety 
procedures and methodology is largely superficial and is 
usually directed at maintaining minimum legal standards at 
minimum cost. According to Lowrence (1976) safety is defined 
as a judgment of the acceptability of risk, and risk, in turn, 
as a measure of the probability and severity of harm to human 
health. Here it is proper to point out that since cost is 
incorporated in any severity of harm to human health, safety 
is a function of cost. 

A function is safe if its risks are judged to be acceptable. 
This definition emphasizes the relativity and judgemental 
nature of the concept of safety. It also implies that two 
very different activities are required for determining how 
safe things are: 

a. Measuring risk, an objective but probabilistic 
pursuit. 

b. Judging the acceptability of that risk (judging 
safety), a matter of personal, social and economic 
value judgement. 

Failure to appreciate how safety determinations resolve 
into the two discrete activities, is at the root of many mis- 
understandings. In one of the most common instances, it gives 
rise to the false expectation that scientists can measure 
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whether something is safe or not. They cannot, of course, 
because the methods of the physical and biological sciences 
can assess only the probabilities and consequences of events, 
not their value to people. Scientists are prepared principally 
to measure risks. 

Since the taking of both personal and societal risks is 
inherent in human activity, there can be no hope of reducing 
all risks to zero. Rather, as when steering any course, we 
must continually adjust our heading so as to enjoy the greatest 
benefit at the lowest risk and cost. 

Vital to any business function is an effective cost-control 
program - in safety, a program that allows for specific budgeting 
for injury cost and equally important, specific accountability 
for injuries. This method assumes that employee injury costs 
should be controlled just as any other production cost, since 
they increase operating overhead, as do the expenses for raw 
material, parts, and labor [Miller, 1977]. 

This is not a cold, inhuman approach to safety. There is 
a direct correlation between cost and human suffering. An 
accident that causes a great deal of pain and suffering will 
also generate high cost and loss of productivity. Thus, 
elimination of high-cost accidents will not only save money 
but also make the workplace safer and minimize the possibility 
of accidents that generate suffering [Miller, 1977] . 

Hammer (1972) in his Handbook of System and Product Safety 
has suggested that injury or damage can result from four funda- 
mental causes or combinations thereof: 
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material failure 



a. 

b. hxaman error 

c. adverse characteristics of a product 

d. unusual environmental conditions. 

Recently, personnel concerned with accident prevention 
have become more and more convinced that injury or damage from 
any of these causes can be prevented or lessened through good 
design and planning. 

According to Zeller (1970) the interest in accident preven- 
tion or reduction has resulted in great public airing of the 
problem as well as increased awareness of the need for greater 
understanding of the causes if effective remedial action is to 
be developed. 

There is, however, some confusion as to precisely what 
constitutes an accident. Review of accident statistics indi- 
cates vastly different criteria for accident reporting. For 
this reason, statistical comparisons and statistical analysis 
can be accepted only with reservation until there is assurance 
that the data sources are comparable. In the broadest defini- 
tion any unexpected event might be considered an accident; for 
practical purposes, however, prevention is most applicable to 
those mishaps in which either damage or injury is sustained. 

From the standpoint of cause and prevention, however, 
there is often little difference between circumstances that 
lead to destruction and those that result in only minor or 
no damage. 
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Another category of mishap - the hazardous condition or 
near miss - might also serve to alert personnel to incipient 
accidents . 

It is axiomatic that effective prevention must have a 
focal point of application. This implies that the probable 
cause of future accidents can be predicted. This, in turn, 
implies that the causes of past accidents have been determined. 

In practice, the determination of the cause of an accident is 
no simple matter. It becomes increasingly apparent as any 
accidental occurrence is examined that there is seldom a 
single, clear-cut cause; more often there are multiple causes, 
which may be immediate or remote. Typical of this confusion 
is the accident involving the drinking driver who, while driving 
at excessive speed, leaves the roadway and crashes into some 
fixed object. It is very easy to attribute the cause of this 
accident to excessive speed, roadway conditions, fatigue, emo- 
tional instability, or to the social mores of a group that not 
only condones but encourages drinking and driving. This is 
quite compatible with the problem society faces when a crime 
is committed that, by careful analysis, can be laid directly 
at the doorstep of society itself. While this sociological 
evaluation of an accident or a crime may result in broad insight, 
it is not conducive to the practical determination of causation 
that can lead to relatively direct remedial action. For this 
reason, it is desirable to define cause so that all accidents 
can be evaluated within the same frame of reference {Lowrence, 
1976 ] . 
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One such definition defines the primary cause of an acci- 
dent as the last act or event in a time sequence that made 
the accident inevitable from that point. While this, too, is 
subject to interpretation, it narrows the possibilities to a 
great extent. This kind of definition implies first a primary 
cause and, secondarily, contributing causes, with the primary 
cause by implication being the most important or, at least, 
the most proximate factor. This approach has the advantage 
of having one cause for each accident, which makes statisti- 
cal manipulation simpler. 

By contrast, other approaches list all causes without 
attempting to assign primacy to one, thus permitting the 
evaluation of all causes collectively without previously 
defined relative importance. 

Unfortunately, even after critical evaluation has led to 
a determination of accident causes, the assessed cause may be 
a statement of what occurred rather than why it occurred. 

In the ultimate analysis of course, accident prevention must 
be based on why rather than what. 

The most commonly designated cause of accidents is human 
error. In accidents where material failure is recognized, it 
is often quite possible to continue tearing down the equipment 
until the precise portion that failed is isolated and the 
cause of the failure whether it be corrosion, stress, faulty 
load conceptualization, or other factors, can be determined 
and redesign proposed. In cases of human error, however, the 
static statement that a human being failed provides no guidance 
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to future improvement. The need to reduce human error to its 
basic constituents as a means of obtaining insight into the 
causes of these failures has resulted in various approaches 
to segmenting human behavior for analytical purposes. 

A more fruitful approach is to analyze human error in 
terms of a total man-machine system interaction in which a 
temporal continuum serves as the base line from which to 
evaluate the human contribution to the mishaps. 

The major expense in a typical safety program is accident 
prevention. However, the general approach is to treat the 
symptom and not the cause of the accident on the basic pre- 
mise that accidents are caused when employees create an unsafe 
act or condition. This superficial treatment of safety may 
arise from the fact that employers incorrectly and greatly 
underestimate the costs attributed to the industrial accidents 
and injury and also underestimate the role safety plays in the 
overall organization. 

To put safety in its proper perspective, it must first 
be realized that safety and efficiency are products of each 
other. That is, the safe establishment is efficient. With 
this in mind, safety then becomes a management problem and 
not just the concern of the foreman or the supervisor. 

There are five basic principles of a safety management 
program. These are; 

a. Accidents are suggestive of failures in the manage- 
ment system. 

b. Certain circumstances are predictive of severity of 
accidents . 
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c. Safety should be managed like any other operational 
function. 

d. An effective safety program will provide establish- 
ment of responsibility and accountability. 

e. An effective safety program will define situations 
that allow accidents to happen. 

Now comes the problem of safety performance measurement. 

W. Tarrants (1977) discussed this problem as the problem that 
has existed since the very beginning of organized attempts to 
control accidents and their consequences. In its most ele- 
mentary form, measurement has been defined as "The process 
of assigning numerals to objects according to rules" [Stevens, 
1951] . When we apply this definition in the safety field, we 
are quickly confronted with problems concerning what "objects" 
to measure and what "rules" to follow. 

As we learn more about the accident phenomenon we change 
our traditional concepts of describing it. Since measurement 
is primarily a descriptive process, we are in danger of 
believing that the description is the real thing and forgetting 
the nature of the phenomenon we want to describe. We tend to 
latch onto a particular type of measure and use it constantly 
which often prevents us from searching for and applying new 
measures which better describe the situation. 

The progress and maturity of a science or technology are 
often judged by whatever success has been achieved in the use 
of measures. Measurement, perhaps more than any other single 
aspect, has been the principal stimulus of progress in all 
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professional fields. Measurement is the backbone of any 
scientific approach to problem definition and problem solu- 
tion. Without adequate measurement in the safety field we 
cannot describe the safety state of our operations or determine 
whether or not our safety programs are really accomplishing 
anything. Sound measurement is an absolute prerequisite for 
control and both are necessary for prediction. As Tarrants 
(1977) suggests, accident control and prediction, valid and 
reliable measures of safety performance are essential in 
order to : 

a. Locate and describe problem areas, 

b. Identify causal relationships, 

c. Make decisions concerning the optimum allocation of 
accident prevention resources, 

d. Evaluate the effectiveness of applied countermeasures, 
and 

e. Detect when the system is deteriorating toward 
unacceptable limits of control. 

The existing measures of safety performance some of which 
will be examined does not permit us to achieve these objectives 
at an acceptable level of effectiveness. 

The purpose of this thesis research is to perform a 
literature survey of the various techniques by which safety 
program effectiveness is currently measured and to propose 
a methodology for the utilization of the recordable occupational 
injuries and illnesses data with an application based on the 
analysis of real data. 
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II. LITERATURE SURVEY 



As suggested earlier, a safety program, like any organi- 
zational program must be measured, thus its effectiveness may 
be evaluated and its contribution to overall efficiency will 
be evident. Managers will compare, justify and make future 
predictions on the overall loss prevention strategy. 

There are several methods in use of measuring safety 
performance effectiveness like frequency and severity rates, 
critical incident techniques, control charts, learning curves, 
safety sampling. Double Average Comparison Technique (DACOM) , 

V 

System Analysis Techniques etc. 

A discussion of these methodologies is; presented below. 

A. FREQUENCY AND SEVERITY RATES 

Frequency and severity as discussed by Simonds and 
Grimaldi (1963) are accepted standards by which a company 
can appraise its industrial injury record and set goals for 
achievement. Very roughly, these terms refer, respectively, 
to the relative frequency of occurrence of major injuries, 

-on the one hand, and the total days lost, plus time charges 
for deaths and permanent impairments resulting from major 
injuries, on the other. It is important to be able to com- 
pare the injury record of one dividision with that of another 
in the same company, or of the company for the current year 
with its performance in preceding years, or of one company 
with other concerns in the same industry. For these reasons 
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and to facilitate the holding of contests among companies to 
stimulate accident-prevention efforts, the American Standards 
Association initially had established precise bases for com- 
puting frequency and severity rates (Z16.1 Code). In their 
calculations of safety performance based on rates, Simonds and 
Grimaldi have taken into account only disabling injuries. A 
single safety index developed by Western Electric was pre- 
sented by Gilmore (1970) that is: 



SSI 



C X 1,000,000 
16 X D X P 



where : 



SSI = Single Safety Index 

P = Nimber of plant personnel 

D = Days in the period being measured 

C = Charges as the total number of calendar days 

lost in excess of the first seven calendar 
days or 10 percent of Z16.1 schedule (which- 
ever is greater) for both on-and off-the 
job injuries. 



New concepts have been added to the disabling injury fre- 
quency method in this formula, first, there is a dependence 
on the severity of the accepted injury. Second, off and on 
the job disabling injury have the same weight. Third, the 
count on days charged begins with the eighth day of disability. 
Fourth, the use of 10 percent of the severity schedule for 
days lost under the Z16.1 code recognizes what some consider 
inequities within that schedule. 
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A test of a plant's performance by this index might 
serve to make managers more aware of the costs of manpower 
losses due to accidents. 

1 . Frequency Rate 

The frequency rate is the number of disabling injuries 
as defined by the American Standard Association per million 
man hours worked. In mathematical terms it can be expressed 
as : 

Frequency = Number of Disabling injuries ^ 

Number of manhours worked 

1 , 000,000 



or for ease of computation. 



Frequency 



Number of disabling injuries x 1,000,000 
Number of man hours worked 



Example 1 . A shipyard concern employed an average of 
2700 workers during 1978. Working 40 hours a week for about 
50 weeks, each man put in about 2000 hours during the year. 
They experienced 65 lost-time injuries during the course of 
the period. 

Frequency = x^2000^*^^ ~ 12.03 per million manhours 

A statement that the shipyard has a frequency rate of 12 
means that 12 disabling injuries occur per million man-hours 
worked . 
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In calculating the number of disabling injuries, it should 
be noted that it is the number of disabling injuries and not 
the number of accidents that is intended for inclusion in the 
total. For example in a case of a catastrophic accident 
where 25 people were killed in an explosion, 25 disabling injuries 
would be included in the total number of disabling injuries for 
the unit's experience. 

It is generally felt that frequency rates based on a million 
or more man-hours are very significant. Obviously, the smaller 
the sample, the less reliable is the rate as evidence of 
accident-prevention performance. Due purely to chance, the 
frequency rate of the shipyard in the above example might vary 
considerably from year to year. Nevertheless, the approximate 
yearly frequency rate would be a fairly good indication of how 
frequently activities got sufficiently out of control to 
result in serious injuries. 

A frequency rate well over 12 could probably be reduced. 

In appraising this frequency rate, however, one should see 
how it compares with typical frequency rates in other firms 
doing the same type of job. 

We know, as yet, nothing about how serious those 65 
injuries were. That leads to consideration of a measure 
that will be affected by the seriousness of the disabling 
injuries . 

The bureau of Labor Statistics uses a base of 100 full- 
time employees as opposed to the 1 million man-hours used by 
the American National Standards Institute (ANSI Standard Z16.1). 
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It is assumed that 100 full-time employees would work 200,000 
hours per year (40 hours per week per worker, 50 weeks per 
year). Computed on this basis, the injury frequency rate 
for the shipyard mentioned would be: 

Injury frequency rate (BLS) = 5 ^ 400,000 

= 2.4 per 200,000 man-hours. 



2 . Severity Rate 

The severity rate is the number of days charged for 
disabling injuries per million man-hours worked. The time 
charges include, first, the number of actual calendar days 
(including holidays or plant shutdowns) on which the injured 
person was rendered unable to work in temporary total disability 
cases. Neither the day of the injury nor the day the injured 
worker returns to work is counted in the lost working days. 

The method of computing severity as well as frequency 
rates are the Z16.1 - 1954 R. 1959 Publication of the American 
Standards Association (or American National Standards Insti- 
tute ANSI) . In Table I specific time charges are available 
which have been established by the American National Standards 
Institute for use for all other lost-time cases (deaths, 
permanent toal, and permanent partial disabilities) . 

In this group of deaths and permanent impairments actual 
time lost from work in a particular case is not considered. 

The standardized time charges alone are applied. 
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Table I 



The American Standard Scale of Time Charges 



Nature of Injury 



Time Charges as 
Number of Days Lost 



Death 




6,QQ0 


days 




Permanent Total disability 

Loss of member or complete loss of use of 


• 


6 , Q0.0 






Arm above elbow 




4,500 






Arm above wrist but not above elbow 
Hand above proximal joints of fingers. 




3,600 






but not above wrist 




3,000 






Thumb at or below distal joint 
Thumb above distal, but not above 




3oa 






proximal joint 




600 






Thumb metacarpal 




900 






Other fingers: 


Index 


Middle Ring 


Little 


Bone damage below distal joint 
At or above distal but not including 


100 


75 


60 


50 


middle joint 

At or above middle but not above 


200 


150 


120 


100 


proximal joint 


400 


300 


240 


200 


Metacarpal loss 


600 


500 


450 


400 


Leg above knee 




4,500 






Leg at or below knee but above ankle 
Foot : 




3,000 






At ankle 
Toes : 




2,400 






Great toe at or below distal joint 




150 






Great toe above distal but not above 








proximal joint 




300 






Great toe meatarsal 
Any other toe : 




600 






Distal phalange 




35 






Middle phalange 




75 






Proximal phalange 




150 






Metatarsal 




350 






One eye (loss of sight) , whether or not 










there is sight in the other eye 




1,800 






Both eyes (loss of sight) , in one accident 


6,000 






One ear (complete industrial loss of 










hearing) , whether or not there is hearing 








in the other ear 

Both ears (complete industrial loss of 




600 






hearing) , in one accident 




3,000 






Hernia (unrepaired) 




50 







Note: If hernia is repaired, it is 

not counted as a permanent disability 
but rather as a temporary total disability 
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Table I (Cont'd) 



Finger tips: Loss of a finger tip without 

traumatic or surgical bone involvement 
is not give a standard charge but rather 
is treated like any temporary total 
disability . 



The American Standard Scale of Time Charges 

(taken from Simonds, R.H., and Grimaldi, J.V. [1963], 

pg. 38) 
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For injuries involving more than one part of the body, 
the total may never exceed 6000 days. This was based on the 
life expectancy of the average worker times the number of 
working days per year. (The Bureau of Labor Statistics does 
not include a fixed charge for a fatality.) 

With the Bureau of Labor Statistics method, only actual 
workdays lost are charged. The Bureau of Labor Statistics 
method requires time charges be included even if an employee 
is assigned another job; any change in occupation resulting 
from a work accident or illness is recordable. Therefore, by 
ANSI Z16.1 



Disabling injury severity rate 



total days charged x 1,000,000 
employees hours of exposure 



Example 2 . If in the previous example we had 20 disabling 
injuries in the shipyard resulting in 800 days lost, the dis- 
abling severity rate would be: 



Disabling injury severity rate 



800 X 1,000,000 
5,400,000 



= 148 days per million man-hours 



The average severity per injury can also be determined. 
This can be done in either of two ways ; 



Average days charged 



Total days lost or charged 

Total number of disabling injuries 



800 

20 



40 (Average seriousness of injuries 
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Average days charged 



injury severity rate 
injury frequency rate 



148 

3.7 



40 (Average seriousness of 
injuries) 



Where injury frequency rate for the 20 disabling injuries in 
the shipyard is 



20 X 1,000,000 
5,400,000 



3.7 per million man-hours 



In summary, both rates are needed in appraising safety 
performance, but the severity rate particularly should be 
examined over a several-year period. For comparison purposes 
the frequency rate is best, but since severity is actually a 
combination of the frequency and relative seriousness of 
injuries, perhaps a low severity rate is the most satisfying 
long-run accomplishment. 

The evaluation of those rates is based on accident statis- 
tics, which, by their very nature, are collected after the 
fact- To be statistically valid, accident data must be col- 
lected either over long periods of time as already discussed 
or from a large number of similar activities. When they must 
be collected over a long period, by the time statistical validity 
has been established, operating conditions may have changed 
so that the data no longer apply. 

Accident statistics provide valuable information to regula- 
tory agencies and insurance companies. Regulatory agencies 
may use such data to identify causative factors and whether 
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additional safety requirements are needed to eliminate them 
in future accidents. Insurance companies can use accident 
data in determining costs of premiums, which are based on 
accident and injury frequencies and severity rates. 

Unfortunately, even where accident and injury statistics 
can be useful, they are often incomplete, inaccurate, and 
therefore incorrect [Hammer, 1976] . 

Concluding the discussion about the frequency and severity 
rates as defined by the American National Standards Institute 
(ANSI), Standard Z16.1, as the number of disabling injuries 
sustained per million man hours worked for the frequency rate, 
and as the number of days charged to disabling injuries per 
million man hours worked for the severity rate, neither accounts 
for the magnitude and duration of the effect created by a 
change in the safety program. 

Management therefore must wait until accidents occur before 
there can be a comparison to determine the effect a change 
has made in the safety program. This conclusion is supported 
by Duty (1970). 

B. CRITICAL INCIDENT TECHNIQUE 

The simplest way to find out from employees if they are 
aware of any hazards in their work environment is to ask them. 

The Critical Incident Technique is a means to do this most 
effectively. The method is based on collecting information on 
hazards, near misses, and unsafe conditions and practices from 
operationally experienced personnel. It can be used beneficially 
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to investigate man-machine operational relations and to use 
the information learned to improve equipment and operations. 
According to Hammer (1972) this technique consists of inter- 
viewing personnel regarding involvements in accidents; or near 
accidents, difficulties, errors, and mistakes in operation; 
and conditions that could cause mishaps. The surveys generally 
request the persons interviewed to include their own experi- 
ances and also experiences of other personnel whom they have 
actually observed. The person is asked to describe all near 
tiisses or critical mishaps that he can recall. 

In effect the critical incident technique accomplishes 
the shme result as an accident investigation: Identification 

through personal involvement of a hazard that has or could 
result in injury or damage. When the witnesses who observed 
a mishap or near miss, but were not participants, are added 
to those who were involved, an extremely large population is 
available from which information on possible accident cause 
zan be derived. 

Even isolated incidents reported by the technique can be 
investigated to determine whether corrective action is necessary 
or advantageous. However, when a large number of persons are 
interviewed regarding similar types of equipment or operations, 
similarities begin to appear in reports of hazards and near 
misses. Where these indicate deficiencies, difficulties, or 
other inadequacies, they can be accepted as indicators of areas 
in which improvements are necessary. 
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Attempts have also been made to produce similar effective 
results in obtaining information through the use of question- 
naires to be filled in by selected personnel. This method 
has proved to be unsatisfactory for a number of reasons. One 
fundamental problem was the need for extreme care in selecting 
and phrasing the question. Too often, the person completing 
a questionnaire would give the questions interpretations 
neither considered nor intended by the person who prepared 
them. Any question should be avoided whose answer requires 
involved reasoning that is not immediately apparent to the 
reader . 

The critical incident technique procedure is described by 
Tarrands as carried out at one plant of the Westinghouse Com- 
pany. The steps are summarized by W. Hammer (1972) as follows: 

a. A group of employees with previous experience and 
involvement in manufacturing processes and equipment was 
selected. Each person included was listed according to various 
factors, in order to produce as wide a range of experience as 
possible. Representatives were selected randomly from each 
factor group. 

b. The participants were interviewed and informed of the 
study and its objectives. They were given an opportunity to 
withdraw from participation. 

c. At the end of the interview the participant was given 
a copy of the statement on the study and its objectives and 

a list of typical incidents gathered at other plants. This 
procedure was to stimulate the recall process. 
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d. Participants were asked to describe any incident (s) 
that they could recall, whether or not they had resulted in 
innury or property damage. They were asked whether they re- 
called the incident similar to those that had occurred at 
other plants, as described on the list they had been provided. 

e. Questioning was carried on until human errors or un- 
safe conditions in any recalled incident could be described. 

Twenty participants related 389 incidents of 117 differ- 
ent types. Over 50 percent more potential accident causes 
were found by this method than had been identified from acci- 
dent records. One participant estimated that almost 70 per- 
cent of the problems reported occurred every day, indicating 
an almost constant exposure to danger. According to Hammer 
(1972) the basis for the Critical Incident Technique is that 
it has been estimated that for every mishap there are at least 
400 near misses and that for every serious injury that occurs, 
there are approximately 600 no loss accidents (incidents) that 
should serve as a warning to say that given enough time, it 
will occur. Once a potential accident has been reported, 
the hazards are corrected so that a real accident will not 
occur. As these hazards are eliminated or reduced so should 
accident frequency and severity rates. 

The major deficiency of this method is that its effective- 
ness will be dependent upon all employees reporting those 
potential accidents (incidents) in which they are involved. 
Usually employees will be reluctant to do so. They are worried 
about their supervisors attitude, their own personal records 
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and/or spoiling the company's safety record. Thus data with 
some degree of bias are introduced. 

C . CONTROL CHARTS 

According to Brown (1976) a control chart is a visual 
means by which an analyst judges whether a process is in con- 
trol or not. The measurements plotted on the chart are those 
of any random variable. Thus frequency and severity of acci- 
dents, as well as any other intermediate indicator of hazards, 
could be plotted. Judgements based upon these plots determine 
if the process is in control with respect to the random variable 
under consideration. 

Figure 1 shows the typical layout of a control chart. The 
units of the random variable are given on the vertical scale, 
indicating that the height of the plotted point represents the 
value of the random variable for the indicated time period. 

The time scale, given horizontally, shows when the value occurred. 

Although any one value can not be predicted, measurements 
of central tendency and spread define the expected concentra- 
tion and range of the variable. Thus, if the variable behaves 
in a nonrandom way, we can conclude that an outside influence 
is affecting the random variable. The most common way of iden- 
tifying when this occurs is through the use of an upper and 
a lower control limit. These are generally placed at equal 
distances above and below the mean line. 

The measured values as they are recorded in time are 
plotted as indicated in figure 1. A point falling above or 
below the control limits, respectively, is indicative of an 
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Figure 1: Example Control Chart 

(Taken from Brown, D,B. [1976], Pg . 230) 
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out-of-control situation, and assignable causes are generally 
sought. There are other indications of out-of -control situa- 
tions, also. However, prior to discussing these, the means 
for obtaining the control limits should be examined. 

The procedures for setting control limits are essentially 
the same as those for setting the acceptance limits in a test 
of hypotheses. The first step involves the establishment of 
a level of significance (a) , that is the probability of con- 
cluding that the process is out of control when in fact it is 
in control. If methods of identifying causes are expensive 
and the variable is not critical, a low probability can be 
tolerated. However, if an early indication of lack of control 
is necessary, then a high probability of this error should be 
specified. 

Once the value of (a) is determined, the next question 
involves the definition of control. Quite often the state 
"out of control" occurs in one direction only. In sound- 
level readings, for example, rarely is the analyst concerned 
with the plant being too quiet. Here only an upper limit 
would be required, as it would in most cases of pollution 
measurements . 

Other monitoring of processes would require both an upper 
and a lower control limit. In either case the value of (a) 
chosen will represent the total area of probability in the 
out-of-control portion of the chart. The upper and lower 
control limits are obtained depending upon the random variable, 
its distribution, and the value of (a) chosen. 
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Brown (1976) has suggested in the following example that 
the frequency of accidents, above a given severity for a plan, 
has a normal distribution with a mean of 6 and a standard 
deviation of 1.5. Frequencies for the first 6 months have 
been 4, 7, 5, 12, 8 and 6. In his example he allowed for a 
0.05 probability of calling a point out of control when it is 
not. In this example a situation is said to be "out of con- 
trol" when the random variable falls above the upper limit. 
However, the analyst chooses to set up a lower limit to pro- 
vide possible evidence of a lowering of the accident frequency. 
Thus the 0.05 probability will be divided, 0.025 above the 
upper limit and 0.025 below the lower limit. The upper limit 
becomes; (using z = — which "standardize" any normally 
distributed random variable) 

Upper Limit (U.L.) = X + Zq q25 ^°x^ 

= 6 + 1.96(1.5) = 8.94 



where : 

n X. 
t: V 1 




= E[(x-y^^)] 

Ujj = E[X] 
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and the lower limit also becomes : 



Lower Limit (L.L.) = x - /n-,c (<^ ) 

U . Uzo X 

= 6-1.96 (1.5) = 3.06 

The control chart is given in Figure 2 . The fourth month 
was obviously out of control, and assignable causes should be 
sought. Any subsequent monthly reading that falls out of 
control should also prompt an investigation of the plant. In 
this example the assumption of normality should be tested 
since it does not hold generally. Rather than charting indi- 
vidual random variables, whose distributions may be unknown, 
often sample means are plotted. By the same procedure Accident- 
Severity Control charts may be obtained. 

Thus any random variable can be plotted on a control chart. 
The construction of the chart is simply a matter of applying 
hypothesis testing on a continuous basis. The primary advan- 
tage is that continuous visual perception of the random varia- 
ble is maintained. 

This continuous picture enables the analyst to make judg- 
ments not otherwise discernible. This is not limited to the 
upper and lower control limits demonstrated above. Other 
factors that the analyst can use as indicators of abnormal 
operational behavior include: 

a. Several points (four or more) in a row on one side of 
the mean line. The probability of four consecutive points on 

4 

one side is approximately 0.5 or 0.0625. 
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Month 



Figure 2: Control Chart 

(Taken from Brown, D.B. [1976], pg. 231) 
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b. Identifiable cycles. Here two or three years of 
history may be required to identify a given month or other 
period of time when the operation acts in an irregular manner. 

c. Several points in a row, either monotonically increasing 
or decreasing away from the mean line. The probability of 

this type of trend is difficult to establish. However, since 
these points are all on one side of the mean line the probability 
will be considerably less than 0.5^, where n is the number of 
points exhibiting this characteristic . 

In quality control situations, 3a control limits are 

generally used, based on the l-in-1,000 value of (a) under 

the normal-distribution assumption. The 2a (accidents) and 

la lines may also be set up, however, to help the analyst 

identify other out-of-control indicators. For example, two 

points in a row outside of 2a limits would have an approxi- 

2 

mate probability of (0.025) = 0.000625, which is about the 

same as the probability of one point outside 3a limits, assuming 
normality. Although control charts for safety applications 
should not be restricted to the a = 0.001 value, the concept 
of intermediate lines to identify irregularities is a good 
one. 

Control charts are used in some states for monitoring 
traffic accidents. Overall accident frequencies, as well as 
finer breakdowns by severity classifications may be plotted. 

However this technique also does not account for the 
magnitude and duration of the effect created by a change in 
the safety program. Therefore we must wait until accidents 
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occur before there can be a comparison to determine the 
effect a change has made in the safety program [Duty, 1970]. 

D . LEARNING CURVE 

The learning curve method has been used extensively in 
production cost analysis. It was first developed by Dr. T.P. 
iVright for cost analysis of airplane production. He observed 
that the cost of producing each of a series of orders for 
airplanes of a particular model diminished as the orders were 
filled [Gilmore, 1970] . 

Experimental application of the learning curve has shown 
the effect of learning on the repetitive assemblies of equip- 
ment, the effect of incentives on productivity, the effect of 
Low- and high-volume production, and other productivity situa- 
tions. A logical use of this method would be to determine 
the obsolescence of manufacturing processes or the point at 
vhich cost improvement ceases unless a significant change is 
made in the process or that is replaced with a more modern. 
Low-cost process. 

In the study of the American petroleum industry an accident- 
experience learning curve model was developed, which closely 
corresponds to the conventional industrial learning curves. 

As discussed by Gilmore (1970) we see that safe perform- 
ance of work is also a learning process. Experience should 
teach us to do a better job of operating a massive crane to 
lift and place steel, or driving a truck etc. But people 
don't always learn. The job becomes routine and boring. 
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corners are cut, establishes procedures are violated, and 
accidents occur. Good safety programs appear so effective 
that change seems unnecessary, but even the effective ones 
can lose their punch. During orientation, workers are informed 
of the safety rules, but these are easily forgotten. Safety 
performance should improve as experience increases, programs 
improve in quality, job procedures are refined, and effort 
is applied. It seems logical that if production costs decrease 
as we learn how to produce more efficiently, safety perform- 
ance should improve as we learn how to perform work more 
safely. Neither just happens; it takes a concernted effort 
on a continuous basis to make it so. The learning curve is 
just a method to chart the progress of that effort. 

According to Dr. Wright the mathematical model for the 
learning curve is 



y . = 

1 



.-b 

ai 



( 1 ) 



where 

th 

= The cost of the i unit, 

a = The cost of the first unit; therefore y = a, 

i = The production count beginning with the first 

unit , 

b = The measure of the rate of reduction. 

For the learning in safety performance if we represent 
the serious innury frequency by (SIF) and the total injury 
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frequency by (TIF) and using SIF as the measurement unit 
equation (1) becomes 



SIF 



t 



SIF 

o 




( 2 ) 



where ; 



SIF^ = the Serious Injury Frequency at time t. 

SIF = the Serious Injury Frequency at the 

beginning of time. 

t = the accumulated man-hours since beginning; 

it can also be shown as million man-hours 
or dated years on graph. 



b 



the measure of the rate of reduction. 



As in the original learning equation (1) , this model has 
the characteristic of describing constant percentage reduc- 
tions. Each time (man-hour) increase of a constant percentage 
sees an accompanying injury frequency decrease of a constant 
percentage. If t 2 and t^^ are two points in the exposure history 
of a work group and t 2 > then 



SIF 

SIF 



2 

1 



SIF t 
o 1 




(3) 



The original safety equation (2) becomes 



SIF 



SIF ^ 
o ^b 



t^ SIF, 



= SIF 
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and by the log transformation we have 



b log t + log SIF^ = log SIF^ 



or 



log SIF^ = log SIF^ - b log t 

which is the equation of a straight line with slope -b. The 
log transformation of the equation (3) is 

log SIF 2 - log SIF 

— T T T = -b = the slope (4) 

log t 2 - log t^ t' ' / 

The learning curve can be constructed on a log-log graph 
paper on which SIF is plotted on the vertical ordinate and 
the accumulated man-hours on the horizontal ordinate. If the 
improvement in performance was steady, SIF values plotted 
would form a straight line of negative slope. This slope is 
the rate of learning or rate of improvement. These rates 
are expressed as a percentage of the no- improvement level of 
100 percent. In other words, a learning rate of 80 percent 
is an improvement of 20 percent and has a slope equivalent 
to a reduction of 20 percent from the initial value or a new 
value of 80 percent of the initial value. This is shown on 
figure 3 where the 100 percent straight line is the no-improve- 
ment line. Those with the negative slope straight lines 
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Figure 3 : The Learning Rate Curve 

(Taken from Gilmore, C. [1970], pg. 93) 



41 



show the corresponding improvements of 10, 20, 30 and 40 
percent respectively and those with the positive slope 
straight line show the corresponding negative improvement 
of 20, 40 and 60 percent respectively. 

The rate of progress of the learning us usually described 
as that reduction of injury frequency (or whatever) which 

occurs when the time quantity is doubled. This then is equal 

-b ^2 

to a quantity C expressed as a percentage, where ~ = C = 2 

^1 

then 

C~^ = LR (5) 



where ; 

^2 

C = ^ = the time ordinate ratio 

^1 

-b = the slope of the plotted curve 

LR = the learning rate expressed as a decimal. 

Making a log transformation and substituting the value 
C = 2 



-b log 2 = log LR 



( 6 ) 



and substituting (6) into (4) we obtain the equation 



log LR = 



(log 2) (log SIF^ - log SIF^) 
(log t 2 ~ log 



(7) 
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This equation permits, by transposition, the calculation 
of reasonable expectations of injury frequency at some future 
time so that long and short-range goals can be set and perform- 
ance charted against those goals as shown in figure 4, The 
equation for predicting or setting a goal in the future comes 
by solving (7) for log SIF 2 and 

(log LR) (log t„ - log t, ) 

log SIF 2 = iQg 2 ^^^1 

Let us take, for example, a plant which accumulates two 
million man-hours each year. On January 1, 1978, the plant / 

had accumulated 8 million man-hours and had an average SIF of 
30 serious injuries per million man-hours for the last quar- 
ter of 1977. Point data for one month are quite variable, so 
at least three months of accident data are required. 

By January 1, 1979, 2 million man-hours more have been 
accumulated, bringing the total to 10 million man-hours since 
operation began. SIF for the last quarter of 1978 was 27. 

What has been the learning performance rate? 

Using equation (7) 

(log 2) (log SIF 2 - log SIFj_) ^ (log 2) (log 27 - log 30) 
(log t 2 “ log tj^) log 10 - log 8 

= (0-30103) (1.43136 - 1.477) ^ . ,.214 

(1.00000 - 0.90309) u.j.hzx** 
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Figure 4.: 1965 Safety Performance (based on serious injury data) 

(Taken from Gilmore, C. [1970], pg . 94) 
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and 



LR = Learning or performance rate = 0.721 or 72%. 

Assuming the goal for improvement was to continue through 
the coming year at the same rate, what is the goal for SIF at 
the end of 1979? Using the relationship ( 8 ) and assuming that 
two million man-hours will be worked by the same personnel 
during the coming year, we have 

log LR(log t„ - log t, ) 

log SIF^ = t log SIF^ 

= log 0.721 (log 12 - log 10) 27 

log 2 ' ^ 

_ -.14206(1.07918 - 1) . , 

- 0.30102 + 1.43136 

= 1.39399 SIF 2 = 24.77. 

The same result (SIF 2 = 24.77) would have been obtained 
if SIF^ of 30 at t^ of 8 million man-hours had been used. Is 
this a good learning rate, or is improvement too slow? Any 
improvement is in the right direction. Studies generally 
agree that there is no universal curve that fits all learning. 
However, the learning curve provides the ability to recognize 
the existence or absence of progress and the desirability of 
measuring that progress. Improvement is important. When the 
learning curve flattens (100 percent) or goes up (greater than 
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100 percent) , that plant or group has quit learning (improving) 
as already discussed and corrective action is in order. 

Sociologists say that learning at the 80 to 90 percent 
rate is quite acceptable for a mix of men and machines. So 
a very reasonable goal for a safety performance improvement 
would be 10 percent per year. 

A plot can be prepared to show this goal by using log-log 
graph paper and plotting SIF on the vertical ordinate and man- 
hours exposure along the horizontal. As time progresses, the 
actual values of SIF can be plotted to show their relation to 
the goal line. Due to the wide variations in monthly SIF 
values, the plotted points may not show any particular relation- 
ship to the goal line. 

Thus the important aspect of this method is that it allows 
management to set goals for coming periods. But once again 
it does not account for the magnitude and duration of the 
effect created by a change in the safety program and v/e must 
wait until accidents occur before there can be a comparison 
to determine the effect a change has made in the safety program 
[Duty, 1970]. 

E. SAFETY SAMPLING 

Another technique for the evaluation of safety performance 
is the safety sampling technique which according to Petersen 
(1971) is a method of systematically observing workers to 
determine what kind of unsafe acts are being involved as well 
as the frequency of occurrence of unsafe conditions. Using 
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those results we may come up with a safety performance 
figure . 

There are some similarities between safety sampling and the 
critical incident technique. Duty (1970) has pointed out that 
safety sampling is similar to critical incident recall in that 
unsafe acts or conditions that might cause accidents are of 
interest. The difference is that this sampling is not directly 
coupled to the workers own initiative to report these conditions. 
Once the number of exposures is estimated through the sampling 
procedure, then is compared to previous figures and the number 
of exposures is studied. Fewer exposures means more effective 
safety program. 

Gilmore (1970) presents the following examples concerning 
the use of safety sampling technique. Du Pont safety control 
program was examined. The number of unsafe acts and unsafe 
conditions found in a random selected sample of a work area, 
indicates a specific measure of the safety level in that area. 

This sample was made in each work area on a once-per-week 
schedule by a team of supervisors. The inspections were limited 
to 15 minutes. Inspection's time and team were randomly selected. 
Then a plot of the inspection results was performed to help in 
the interpretations. To ensure uniformity and competence of 
the samples, a training program for the supervisors had been 
established. The results were encouraging. It was found that 
an improvement in safety had occurred. This was a successful 
approach, in its primary purpose, of estimating the value of 
the safety level of individual sections as well as teams of 
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employees, within their sections and plants. The randomness 
of the inspection time had a positive effect since the plant 
was on a constant alert basis. Other companies such as 
Monsanto Company, Chrysler Corporation etc., have used this 
technique successfully. One procedure for safety sampling 
according to Petersen (1970) is; 

1. Preparation of a Code: This is an element code list 
of unsafe practices that is developed from the accident record 
of each plant. Additional possible causes are listed. This 
code is placed on an observation form (see figure 5) . 

2. Sampling: The inspector will identify the department 

and the responsible supervisor. He then observes every employee, 
every activity of that area and records a safe or unsafe obser- 
vation of the employee. Each employee is observed and is 
marked as safe or as unsafe if observed as performing safely 

or unsafely. Any unsafe practice is marked on the element code 
list. The accuracy required as well as the results of a pre- 
liminary survey will establish the number of observations 
within the sample. 

3. Validation of the sample: From the preliminary survey 

suppose : 

P = The percentage of unsafe observations 
Y = Desired accuracy. 

Then using the formula as suggested by Peterson (1970) 

N = 

Y^(p) 
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Figure 5; Safety Sampling Worksheet 
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We may obtain the minimum number of observations (N) required 
for the validity of our results. 

This method, as well as the others discussed so far does 
not account for the magnitude or the duration of the effect 
created by the safety program [Duty, 1970]. 

F. DOUBLE AVERAGE COMPARISON TECHNIQUE 

Another method of measuring safety performance is the 
Double Average Comparison Technique method (DACOM) initially 
developed by Wilson (1970) of Sperry Flight systems to measure 
safety performance. 

This method as briefly described below is based upon collec- 
tion of number of exposures to potential accidents in various 
departments (or areas) of a company and compared with the num- 
ber of man-hours worked during a certain period of time. 

An achievement index is constructed based on reduction in 
number of exposures to potential accidents per million man- 
hours worked which gives an indication to the safety director 
if there is any improvement or not in various departments (or 
areas) . 

An interesting aspect of this method is that it may be 
utilized either with data collected by critical incident 
technique (or sampling method) or by the use of real accident 
data thus permitting management to compare departments in some 
uniform way and to have an indication of the effectiveness of 
a safety program before occurrence of accidents. 

There is no indication whether this method may be econo- 
mically utilized. The assumptions that should hold for the 
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method to be valid are: 



1. A safety program exists, 

2. This program had not changed over the period that 
this method is applied. 

The following procedure is suggested by Duty (1970) for 
utilization of the DACOM method: 

1. Collection of data for number of exposures to poten- 
tial accidents in various locations of the company, using 
either the critical incident technique or better, by the 
safety sampling method. 

2. According to the methodology described in the sampling 
technique section a code is prepared, sampling is conducted 
and calculation of the required number (N) of observations is 
determined. 

3 . The data of man hours worked in each area during each 
time period is obtained. 

4. Achievement Index (AI) is defined as the reduction in 
number of exposures to potential accidents per million man- 
hours worked. This index is calculated for each period worked 
and is based upon short range improvement (SRI) and long 
range improvement (LRI) . Assuming that the number of exposures 
to unsafe acts or conditions is a random variable normally 
distributed (for large number of exposures where the Central 
Limit Theorem holds) . 

5. The achievement index is then calculated for each 
group or area where data were collected. 
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A comparison between individual groups or between areas 
is feasible based on these achievement indices. This calcula- 
tion of the (AI) is accomplished by AI = a(SRI)^ + b(LRI)j^ 
where AI is the Achievement Index for the i period with a 
and b the weighting constants based on the subjective management 
feeling for the importance of the Short and Long Range Improve- 
ments and a+b=l (a=b=.5isan indication that the same 
importance is given to the short as well as to the long range 
improvements) . 

6. Calculations of the SRI and LRI necessary for the 
calculation of the AI is done by: 



(SRI)^ 




a . 
1 



where : 



(SRI) . = Short range improvement of the group of 

workers for the i^^ period. 

th 

= Current performance for the i period 
which is the number of exposures per 
million man-hours worked. 



= Historical mean performance of the group 
through the i^^ period, and 

= Standard deviation of the group through 
the i'^h period. 



For i = 1 that is the first period after the new program 
was initiated, the current performance (X^^) will equal the 
mean performance (u^) and = 0 since 
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N 



N .^,^i ' 
1=1 



a . = 

1 



N 



N-1 



Also 



where : 



(LRI)^ = (y^ - G)/a 



(LRI)^ 



Long Range Improvement for the larger 
group for the group. 



y. = mean performance of the smaller group and 

a = the unbiased estimator of the standard 

*^i deviation for the larger group. 

G = The group mean of the larger group, 

G, a are based on the total number of exposures 
^i to unsafe acts or conditions observed 

during each period for the entire company 
and 



N 






i=l 



where ; 



G. 

1 



= Current performance for the i ^ period 
which is the number of exposures per 
million man-hours worked in the entire 
company , 
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N 



number of periods, and 



a 



I (G. - G)^/N-1 
i=l ^ 



7. Interpretation and utilization of the Achievement 
Index as follows: 

The smaller the achievement index the better, as a 
small number is indicative of a small number of exposures 
experienced by the group for which the AI was calculated. 

A negative AI is an indication that the group for which that 
AI was calculated did not exceed its mean, whereas the rest 
of the company experienced some exposures. 

A regression line also may be formed to fit the AI of 
the previous years and the current one having the form: 



y = a + bx 

where : 

y = The predicted value of achievement based on 
the data used, 

X = The period number, 

a = The intercept of the regression line = y - bx, 

b = The slope of the regression line 

K _ _ 

I (X. - x) (y . - y) 

i=l ^ ^ 



I (X. - X) 
i=l ^ 
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where : 



th 

= The i period number , 

X = Mean of all periods, 

th 

= Achievement index for the i^ period, and 

y = The mean achievement index for the overall 
periods . 

Positive slope or more positive than the previous period 
can be interpreted as a rising tendency to more exposures. 

Negative slope or more negative might indicate a falling 
tendency . 



G. SYSTEMS ANALYSIS 

In their article "The Economics of Safety ... A Review 
of the Literature and Perspective", I.R. Canada and M.A. 

Ayoub (1977) adopt the definition and description of systems 
analysis as given by E.G. Triner (1968) as follows: 

Systems analysis is an inquiry to aid a 
decision maker to choose a course of action 
by systematically investigating his proper 
objectives; comparing quantitatively, where 
possible, the cost, effectiveness and risks 
associated with the alternative policies or 
strategies for achieving them, and formulating 
additional alternatives if those examined are 
found wanting. 

Systems analysis is not only the comparison of alternative 
means of achieving a desired result but, more importantly, 
it is the vehicle for focusing attention upon the basic 
requirement itself. The means are complicated and are made 
up of a number of interrelated items. In systems analysis, 
the analysts, by varying the inputs, can assess the effects 
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upon both costs and output. Given a certain resource, the 
best combination of inputs may be determined to maximize 
output. Or, from a different point of view ... given the 
desired output, it can be determined how this output may be 
obtained at a minimum cost. 

Safety analysts recognizing the needs for quantification 
developed several cost and performance models for analyzing 
the economics of safety problems. Roland (1975) has suggested 
a measure of safety performance which incorporates in a 
single parameter the essentials of that performance, that is 
the probability of the mishap and its severity. According 
to Roland (1975) when one first attempts to establish a deci- 
sion methodology for safety analysis, the multidimensional 
nature of the criteria is immediately apparent. The tradi- 
tional criterion of quantity of mishaps quickly breaks down 
when exposure variation is considered. Combining exposure 
with quantity of mishaps results in a rate. This rate is 
based on historical evidence and the extrapolation of this 
rate to future periods of time as a measure of satisfactory 
performance, can be accepted only under two limitations: 

1. That the historical performance was typical or aver- 
age. 

2. That the system which generated the historical rate 
will not be substantially altered in the future period. 

The matter of the level of historical performance may be 
satisfactorily resolved if there are multiple samples of 
the rate exhibiting stability. 
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For the variability of historical rate a suitable function 



of the chi-square distribution of the form 



A 



< 




2F + 2 



where : 

A = mishap rate 

a = risk 

F = number of mishaps (historical) 

T = historical exposure. 



is suggested by Roland (1975) . 

This function of the chi-square distribution will establish 
a conservative bound for a future criterion. Also this func- 
tion assumes that the mishap rate varies as the chi-square 
distribution. Such a rate, usually single bounded, projected 
into future periods, can provide a measure of future perform- 
ance given that no substantive alterations are made in the 
system. 

Assuming an estimate of future exposure, the Binomial or 
Poisson distributions will determine the probability of future 
quantity of event occurrences. 



Pr (F = K) 



V 

(At)-^ 

k! 



-At 

e 



where 
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k = number of mishaps 
t = future system exposure 



The problem which arises from another dimension of the 
performance analysis, the severity of the mishap, given the 
probability of a future mishap and its value, the expected 
value may be formed as 

00 

E(C)K = / Pr(K)C(K) 

— oo 

where C = Cost 

Certain probability functions will not allow this integral to 
be convergent. Such a case may be extremely costly for the 
user of such a system. Expected costs can be predicted in 
these cases by taking average values. It is frequently 
easier to perform a summation than to integrate the functions. 
Such a summation is given by 

K 

E(C)K = I Pr(n)C(n) 

n=l 



As another method of measuring safety effectiveness may 
be consider^ed the method used by Brown (197 6) who developed 
a Fault tree and cost/benefit analysis for choosing optimal 
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safety alternatives. J.R. Canada and M.A. Ayoub (1977) 
suiiunarize Brown's work as follows. 

Brown shows how negative utility amounts can be assigned 
to all possible head events and the relevant probabilities 
multiplied by the negative utilities. The results, which 
are expected negative utility amounts, are called "measures 
of criticality" by Brown (1976) . 

Reductions in negative expected utility or criticality 
are considered to be quantitative expressions of benefits or 
effectiveness, and these are then related to costs to find the 
optimal combination of safety alternatives for the decision 
maker's cost-benefit trade-off function. 

Using Brown's (1976) methodology the safety manager should 
first utilize the fault-tree analysis technique as a logical 
approach to identify the areas in a system that are most criti- 
cal to safe operation. 

Having developed the fault tree analysis the safety manager 
has an insight of the problem but for further quantification 
a quantitative analysis has to be accomplished so that effec- 
tively allocated the safety budget which is an upper bound 
for the actual decision to be taken. 

Generally the best investments are those with the lowest 
cost/benefit figures, and these should be made first. Those 
figures may be interpreted as safety performance figures and 
when viewed in this perspective it becomes a powerful tool for 
improving the quality of safety investments. 
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Next the fault tree methodology will be examined since 
it is the basis for discussing Brown's approach to cost/benefit 
analysis. Following this discussion an application on cost/ 
benefit analysis using fault tree analysis will be performed. 

1 . Fault Tree Analysis 

Fault Tree Analysis, (FTA) , was developed mainly by 
engineers who studied engineering systems in great detail, 
with little or no contribution by mathematicians. A possible 
explanation given by R.E. Barlow (1975); J.B. Fussell (1975) 
and N.D. Singpurwalla (1975) is the fact that the construction 
of the fault tree, a basic step in fault tree analysis, requires 
an intimate knowledge of the manner in which a system is de- 
signed and operated. The mathematician's lack of familiarity 
with the operation of systems, and perhaps their preoccupation 
with mathematically well defined problems, has deterred their 
interest in fault tree analysis. 

According to R.E. Barlow (1975) and H.E. Lambert (1975), 
FTA is one of the principle methods of systems safety analysis. 
FTA evolved in the aerospace industry in the early 1960 's. It 
was the result of a contract between the Air Force Ballistics 
systems division and Bell Telephone Laboratories for the study 
of inadvertent launch in the Minuteman ICBM [Delong, 1970]. 

After initial work at Bell Telephone Laboratories, development 
of fault tree continued at the Boeing Company, where scien- 
tists devoted much effort to develop its procedures further 
and became its foremost proponents. 

Rodgers (1971) has referred to the following six 
steps that were used in applying the technique to the 
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Minuteman Program. 

1. Define the undesired event 

2. Acquire complete understanding of the system. 

3. Construct the logic diagram (Fault tree) 

4. Collect quantitative data 

5. Evaluate fault tree probability 

6. Analyze computer results. 

FTA is a detailed deductive analysis that usually requires 
considerable system information. It can be a valuable design 
tool. It can identify potential accidents in a system design 
and can help eliminate costly design changes and retrofits. 
FTA can also be a diagnostic tool. It can predict the most 
likely causes of system failure in the event of a system 
breakdown . 

Undesired events requiring FTA are identified either 
by inductive analysis, such as a preliminary hazard analysis, 
or by intuition. These events are usually undesired system 
states that can occur as a result of subsystem functional 
faults. These events can be broad, all-encompassing events, 
such as "Release of Radioactivity from a Nuclear Power Plant" 
or "Inadvertent Launch of an ICBM Missile", or they can be 
specific events, such as "Failure to Insert Control Rods" 
or "Energizing Power Available on Ordnance Ignition Line". 

The goal of fault tree construction is to model the 
system conditions that can result in the undesired event. 
Before the construction of a fault tree can proceed, the 
analyst must acquire a thorough understanding of the system. 
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In fact, a system description should be part of the analysis 
documentation. The analyst must carefully define the undesired 
event under consideration, called the 'Top or Head event'. 

Practical considerations require that he scope the 
analysis, setting partial and temporal bounds on the system. 

To make his analysis understandable to others, the analyst 
should clearly show all the assumptions made in the construc- 
tion of the fault tree and the system description used. 

Event Description ; A fault tree is a model that 
graphically and logically represents the various combinations 
of possible events, both fault and normal, occurring in a 
system that leads to the top event. The term, event, denotes 
a dynamic change of state that occurs to a system element. 

System elements include hardv/are, software, human and environ- 
mental factors. 

Event Symbols : The symbols shown in figure 6 represent 

specific types of fault and normal events in FTA. The rectangle 

defines an event that is the output of a logic gate and is 
/ 

dependent on the type of logic gate and the inputs to the 
gate . 

The circle defines a basic inherent failure of a system 
element when operated within its design specifications. It 
is therefore a primary failure, and is also referred to as a 
genetic failure. The diamond represents a failure other than 
a primary failure that is purposely not developed further. 

The switch event represents an event that is expected to occur 
or to never occur because of design and normal conditions, 
such as a phase change in a system. 
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Fault Event 





Undeveloped Event 




Switch Event 





Transfer OUT 




Conditional Input 



Figure 6: Event Symbols 

(Taken from Brown, D.B. [1976], pg. 158 
and Rodgers, W.P. [1971], pg. 41) 
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Logic Gates ; The fundamental logic gates for fault 



tree construction are the OR and the AND gates. The OR gate 
describes a situation where the output event will exist if ■ 
one or more of the input events exist. 

The AND gate describes the logical operation that 
requires the coexistence of all input events to produce the 
output event. Another gate used in the FTA is the inhibit 
gate. This gate permits applying a condition or restriction 
to the sequence. The input and condition or restriction must 
be satisfied for an output to be generated. The symbols for 
the logic gates are shown in figure 7. 

Construction Methodology ; The fault tree is so struc- 
tured that the sequences of events that lead to the undesired 
event are shown below the top event and are logically related 
to the undesired event by logical gates . The input events to 
each logic gate that are also outputs of other logic gates at 
a lower level are shown as rectangles. These events are 
developed further until the sequences of events lead to basic 
causes of interest, called "basic events". The basic events 
appear as circles and diamonds on the bottom of the fault tree 
and represent the limit of resolution of the fault tree. 

The structuring process used to develop fault flows 
in fault trees when a system is examined on a functional 
basis is presented in figure 8. At this level, schematics, 
piping diagrams, processes flow sheets, etc., are examined for 
cause and effect types of relationships to determine the 
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Output 



Output 




I I Inputs 
M^D Gate 




Figure 7 ; Symbols For Logic Gates 
(Taken from Rodgers, W.P. [1971] , pg. 40) 
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failure due to excessive operational or environmental 
stress. 

^An inhibit gate is a special case of the 
AND gate. The oval indicates a conditional event 



Figure 8: Levels Of Fault Tree Development 

(Taken from Barlow, R.E. and Lambert, H.E. [1975], pg . 16) 
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subsystem and component fault states that can contribute to 
the occurrence of the undesired event. 

Efforts have been directed toward automating fault 
tree construction for computer implementation [Fussell, 1972]; 
[Powers et al, 1975] . 

Purpose and Evaluation of the Fault Tree ; The fault 
tree once constructed, serves as an aid in determining the 
possible causes of an accident. When properly used, the 
fault tree often leads to discovery of failure combinations 
which otherwise might not have been recognized as causes of 
the event under analysis. The fault tree can be used as a 
visual tool in communicating and supporting decisions based 
on the analysis, such as determining the adequacy of system 
design. The fault tree provides a convenient and efficient 
format helpful for either quantitative or qualitative evalua- 
tion of an event, such as determination of the probability of 
the occurrence of a top event. 

In the fault tree and Cost/Benefit analysis as the 
major goal of the fault tree may be considered as the calcula- 
tion of the probability of occurrence of the top event. 

In many cases the construction of an initial fault 
tree may be reduced to a simplified one. There are basically 
two techniques for simplification of the boolean expression 
of a fault tree. That is either utilizing the Veitch diagrams 
or analytically utilizing the Boolean algebra identities. 
Appendix (A) gives these identities the familiarity of which 
increase the ability of manipulating Boolean equations. 
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According to Brown (1976) the purpose of developing 
a fault tree and quantifying it it to effectively allocate 
the safety budget. To do this, the various alternative safety 
investments are considered in light of their effect upon the 
fault tree and the resulting head event. A measure of cost/ 
benefit is then determined for use in decision making. Before 
completing the presentation of Brown's methodology some 
terminology as given by Brown (1976) will be introduced. 

Cost . Cost is defined as the dollar outlay to pay for 
the incorporation of a device, method, procedure and so on 
(henceforth called a countermeasure) into the industrial sys- 
tem for a given unit period of exposure. Thus the cost of 
devices that must be periodically recharged and/or replaced 
is based on average costs for a given unit (e.g., a 1,000,000 
man-hour exposure period). Permanent fixtures, such as machine 
guards, can be prorated on the basis of the life of the machine. 
The cost of educational programs can be prorated, based upon 
their frequency. All countermeasures must, for comparison 
pruposes, have a common denominator. 

Benefit . Benefit is the negative utility reduction. 
Measure of benefit is the expected negative utility. There is 
a negative utility (or cost in terms of dollars and personal 
well-being) associated with accidents. This negative utility 
depends upon the severity of the accident. 

The expected negative utility of the head event if 
it occurs can now be calculated by the following: 
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E = 



n 

1 P • u . 
iil ^ ^ 



where : 

•H Vi 

P. = the probability of occurrence of the i^ 
severity class given that the head event 
occurs , 

N = the number of severity classes, 

= the negative utility associated with the 
ith severity class. 

An alternative method for calculating E would be more 
appropriate if the values of negative utility from a large 
number of past occurrences of the head event were measured 
directly. Thus the expected negative utility associated with 
the head event would be obtained from the arithmetic mean of 
these measurements ; 



E 



n 




n 



Both equations are equivalent under the conditions 
that there are n severity classes (N = n) and that the proba- 
bility of each severity class is equivalent (P^ = . This 

occurs when each accident is considered as a unique situation. 

Cost/Benef it ; This term is a vague term used in 
describing a variety of applications. Here it is defined to 
be the dollars spent per negative utility reduction. 
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Absolute measure of "Criticality”; 



Associated with 



the head event is defined as 



C = P • E 



where : 



P = The head event probability of occurrence 
(in occurrence/mmh) . (The technique for 
obtaining P will be discussed.) 

E = The expected negative utility (in dollars/ 

occurrence or workday /occurrence etc.). Thus 
the absolute criticality associated with 
the head event it takes into consideration 
both the frequency and the severity. 



Determination of head-event Probabilities ; The value 
of P can be obtained assiaming that a proper unit of time or 
production has been determined to adequately define one trial. 
Following directly the concepts of relative frequency and 
probability one way of determining P is 



P 




where ; 



n^ = the number of occurrences of the head event 
is n trials given by the chosen time or 
production time. 

Another way of determining P is by using the fault 
tree end branch probabilities. This is necessary if the effect 
of alternative countermeasures is to be determined. 
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The probabilities of the branch events may be obtained 
as follows: 

In the OR situation, any of the events will cause the 
subsequent event to occur and, therefore, assuming indepen- 
dence, the probability of occurrence of the subsequent event 
is given by 



P 



o 



n 

1 - n (1 

i=l 



) 



where : 

th 

q^ = the probability of the i causal event, and 
n = the number of parallel branches. 

In the AND situation, all the events must occur for 
the subsequent event to occur and, therefore, assuming inde- 
pendence, the probability of occurrence of the subsequent 
event is given by 



Through a reiterative process the probability of the 
head event can be determined from a knowledge of the proba- 
bilities of the branch events. This is the value of P that 
is used in determing the "criticality" associated with the 
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head event (or absolute expected negative utility) . A system 
modification will produce a change in this value of the 
expected negative utility thus providing a measure of benefit 
which actually is a measure of safety performance. 

Brown (1976) gives various examples to demonstrate the 
entire procedure. Here an example will be presented as a 
problem that has been formulated by Brown (1976) in his book 
Systems Analysis and Design for Safety . For the solution of 
this problem. Brown's methodology was followed as already 
described. 

2 . Example 

It is desired to perform a cost/benefit analysis uti- 
lizing fault-tree analysis. The analysis will be performed 
on a stairway where the following accident data are assumed 
to be known, for a five years period. Slippery surfaces 
caused three accidents, inadequate railings caused five acci- 
dents, inattention caused two accidents, and obstacles on the 
steps caused one accident. If the negative utility for each 
accident was an average cost of 200 dollars and if 1000 dollars 
are to be spent for improving the safety of the stairway 
according to the ’’following alternatives, each costs 500 dollars. 

Alternative one . Install new surfaces, this will 
reduce the accidents caused by slippery surfaces by 70%. 

Alternative two . Install new railings, this will 
reduce the accidents caused by inadeuate railings by 50%. 

Alternative three . Install warning signs and perform 
educational programs, by this alternative a reduction of 
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20% to the obstacle and railing-related accidents is 
expected. 

Then perforin the following: 

a. Construct a fault tree diagram for this example. 

b. Based on an evaluation of the alternatives the 
best allocation of the 1000 dollars should be determined. 

c. It is to be determined whether an alternative 
investment of 500 dollars in another area that would yield 

a cost/benefit of 50.00 be justified? (A 60-month denominator 
in calculating basic event probabilities will be used.) 

3 . Fault Tree Diagram Construction 

For the construction- of the fault tree diagram the 
following basic events are required. 

B. Person enters stairway with care 

C. Slippery surfaces of stair 

D. Inadequate railings 

E. Obstacles on steps 

F. Person enters stairway with no care (This basic 
event is the complement of B.) 

From those basic events (or combinations) , the head event 
accident on stairway (A) is likely to occur as follows: 

Event B AND event C have caused 3 accidents in the 
past five years. 

Event B AND event D have caused 5 accidents in the 
past five years. 

Event B AND event E has caused 1 accident in the 
past five years. 
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Event F has caused 2 accidents in the past five 

years . 

Thus events B AND C; OR events B AND D; OR events B 
AND E; OR event F is likely to produce the head event A. That 
is a stairway accident. 

Figure 9 is the fault tree diagram that represents 
the above situations. 

4 . Basic Event Probabilities Calculations 

A 60-month denominator will be used in calculating 
basic event probabilities since it is given so. 

Event C 

3 

Pc = ^ = 0.05 Accidents/months 

Event D 

?d = = 0.083 Accidents/months 



Event E 



60 



= 0.0166 Accidents/months 



Event F 



2 

P_ = -TTr = 0.033 Accidents/months 

60 



The probability of event B is assumed to be 1. 
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Figure 9: Example Fault Tree With Probabilities Assigned 
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EVALUATION OF THE HEAD PROBABILITY OF THE EVENT A 



Using 



n 

P_ = 1 - n (1 -q^) 

° i=l ^ 

for the OR gates, and 

r 

n 

^A " ^ 

^ i=l ^ 

for the AND gates we get 

P = 1 - (1 - 0.05) (1 - 0.083) (1 - 0.0166) (1 - 0.033) 

= 1 - (0.95) (0.917) (0.983) (0.067) = 1 - 0.828 

= 0.1719 having an accident/months. 



EVALUATION OF THE EXPECTED COST 



Since it is given that the negative utility for each 
accident is $200/Accident the expected cost is given by 



E(C) = 200 (3) + 200 (5) + 200 (1) + 200 (2) 

= $ 2,200 

EVALUATION OF THE ORIGINAL CRITICALITY 
C = E(c) P, or 
C = (2,200) (0.1719) = 378.18 
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EVALUATION OF THE NEIV CRITICALITY FOR ALTERNATIVES 



ALTERNATIVE (1) 

New surfaces which will reduce accidents caused by 
lippery surfaces by 70%. That is reduces to 



p 

C(l) 




0.05 




0.015 



New head probability with alternative (1) is 



= 1 - (1 - 0.015) (1 - 0.083) (1 - 0.0166) (1 - 0.033) 
= 1 - 0.985 x 0.917 x 0.983 x 0.967 
= 1 - 0.858 = 0.1414 



New Criticality with alternative (1) is 



C^^j = 2,200 X 0.1414 = 311.08 



ALTERNATIVE ( 2 ) 

New railings will reduce accidents caused by inadequate 
ailings by 50%. That is with alternative (2) P^^ reduces to 



D(2) 



P X -10- 
D ^ 100 



= 0.083 



1 

^ 2 



= 0.0415 
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New head probability with alternative (2) is 



P^2) = 1 - (1 - 0.05) (1 - 0.0415) (1 - 0.0166) (1 - 0.033) 
= 1 - (0.95) (0.958) (0.983) (0.967) 

= 0.134 



New Criticality with alternative (2) is 



C 2 = 2200 X 0.134 = 294.8 



ALTERNATIVE (3) 

Signs and educational programs which are estimated to 
reduce railing-related accidents and obstacle related accidents 
both by 20%. That is with alternative (3) both Pj^ and P^ are 
reduced to 



D(3) 



P X -M- 
D 100 



0.083 X I 



= 0.066 



E(3) 



P X 

^E ^ 100 



0 . 0166 X ^ 



= 0.013 



The new head probability with alternative (3) is 



P^3^ = 1 - (1 - 0.05) (1 - 0.066) (1 - 0.013) (1 - 0.033) 
= 1 - 0.95 X 0.934 X 0.987 x 0.967 = 0.153 
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The new criticality is 



= 2200 X 0.153 = 336.6. 



5. 


Summary 


of Alternatives 








ALTERNA- 

TIVE 


COST 


ORIGINAL 

CRITICALITY 


NEW 

CRITICALITY 


BENEFIT 

(savings) 


COST/ 

BENEFIT 


1 


$500 


378.18 


311.08 


67.1 


7.45 


2 


$500 


378.18 


294.8 


83.38 


5.99 


3 


$500 


378.18 


336.6 


41.58 


12.02 



Since the constraint of the safety budget is $1000 
safety performance will better increase by choosing alternatives 
2 (which is best in terms of cost/benefit) and 1 (second in 
terms of cost/benefit) . 

To answer the question "Would an alternative invest- 
ment of $500 in another area that would yield a cost/benefit 
of 50.00 be justified?", may be answered as follows: 



Cost 

Benefit 



50 since Cost 



500 



a benefit of 



500 

50 



10 should be found. 



Since ORIGINAL CRITICALITY - NEW CRITICALITY = BENEFIT, then 
378.18 - NEW CRITICALITY = 10 and NEW CRITICALITY = 378.18 - 10 
= 368.18 which may be achieved by varying one of the branch 
probabilities to give a head probability 
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368.18 _ 

2200 



0.167 
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III. STATEMENT OF THE PROBLEM 



Already a variety of methods for evaluating safety perform 
ance have been discussed covering most of the existing tech- 
niques in use today. 

From the above discussion it is apparent that this is an 
open area for research and development of new methodologies 
that will permit major improvement in overall safety systems. 
To support this some general area problems will be presented 
and limitations of the methods that already have been dis- 
cussed will be considered. 

The first main problem is that today there is not in 
existence either a unique methodology concerning safety 
evaluation or a unique measurement. That is, various methods 
exist and each one uses a different unit of measure. Some 
methods concentrate on rates, frequency or severity, others 
on indices, and others on cost or cost/benefit units. 

Second, problems concerning most methods in use, is a 
lack of accepted minimum level of requirements. These require 
ments are varying depending on management policy, existing 
regulations, budget constraints, and controllable variables 
of the working environment. 

Following is a brief overview of the literature survey 
methods discussed. The purpose is one of considering existing 
problems and limitations of these methodologies since those 
problems and limitations support the idea of the existing 
problem of safety performance measurement. 
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A. FREQUENCY AND SEVERITY RATES 

The primary objective of this technique is to measure the 
injury experience of a corporation or its departments. Also 
we want to establish comparison criteria between departments 
or corporations for certain periods of time. 

This comparison between companies creates a problem since 
most of the companies do not want to lose their reputation 
and biased data could influence results. In appraising safety 
performance, several-year periods are required so that the 
behavior of the safety program is better traced. The evalua- 
tion of those rates is based on accident statistics after the 
accidents have occurred, thus we are not able to predict the 
influence that a safety improvement might have on the safety 
performance. Finally those rates do not give any cost or 
lost-time indications. Thus these rates should not be used 
exclusively as the only means of evaluating safety performance. 

B. CRITICAL INCIDENT TECHNIQUE 

The main objective of this technique is to identify the 
effectiveness through personal involvement. That is its 
effectiveness is biased by the personal willingness to report 
a hazardous situation. Also it does not provide what the 
criteria are for measuring safety performance. Again we can 
not predict based on this technique for the amount of future 
improvement. For these reasons we may not adopt this as a 
primary method of measuring safety performance. 
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c . CONTROL CHARTS 

Plotting on a chart frequency of accidents (number of 
accidents per million man hours or accident rates) vs. time 
to show comparisons between various departments or to give an 
Dverall picture of the safety program and to visually indicate 
aut of control situations is the primary objective of this 
Tiethod. Again since we are plotting frequency rate the same 
restrictions that were examined for the frequency and severity 
rates hold here. Thus control charts should not be considered 
as the only accepted means for evaluating safety performance 
aut rather might be used as indicators for presenting statisti- 
aal data in graphical form. 

D . LEARNING CURVE 

A different approach to the problem of quantifying safety 
performance was presented by utilizing the information pro- 
/ided by the learning curve due to learning experience. Again 
lere we can not rely on the learning effect for predicting 
future expectations of injury frequency at some future time 
since there are other factors that influence the positive 
Improvements due to learning effect. That is, overestimating 
Dur ability or careless behavior should not be ignored. Also 
a change in the safety program can not be predicted by the 
Learning curve. 

E. SAFETY SAMPLING 

This method may be considered as an improvement of the 
critical incident technique. That is it eliminates the bias 
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introduced by the workers and can be used as an excellent 
indicator concerning supervisory performance and motivation. 
Some problems that can be seen are the following: 

In utilizing this method the most important act is that 
"of systematically observing workers in order to determine 
what unsafe acts are being committed and how often they are 
Dccurring" . But the workers become more attentive when they 
realize that their unsafe acts are recorded. 

Another problem is that this method does not account for 
the magnitude or duration created by improvements in the 
safety program. 

?. DOUBLE AVERAGE COMPARISON TECHNIQUE 

This method for measuring the effectiveness of a safety 
program has not been widely adopted. The following reasons 
night give some explanation. For collecting necessary data 
it is required to apply either the critical incident technique 
Dr the safety sampling methods. Thus, the problems already 
in existence with the utilization of these methods are intro- 
duced. The Achievement Index which is a function of the Short 
and Long range improvements depends on weighing constants that 
reflect "managements feelings as to the importance of Short 
and Long range improvements". This introduces a bias into 
the evaluation of the Achievement Index since it is the sub- 
jective feeling of management. 

Finally it has been pointed out that strong assumptions 
should hold for correct implementation of this method. That 
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is, during the period of data collection (suppose a 3 or 4 
years period) no change in the safety program has occurred. 

G. SYSTEMS ANALYSIS METHODS 

A wide range of approaches and techniques for analyzing 
the economics of the safety problems have been developed 
such as the systems analysis approach, fault tree and cost/ 
benefit analysis approach, mathematical modeling approaches, 
etc. Those methods are using the concepts of utility or 
certain monetary equivalence (cost, losses, cost/benefit, 
etc.) as criteria for measuring safety performance effective- 
ness . 

Since it was found that the most commonly used approach 
was the fault tree cost/benefit analysis approach, more 
emphasis has been given and an extensive presentation of 
its methodology has been provided. In this chapter some 
problem areas will be considered. 

In many instances large amounts of time are required to 
understand the process, identify hazards, create the necessary 
fault trees and even then oversight and omission problems may 
arise. Since fault tree analysis (FTA) can be complex and 
time consuming, in many cases computers should be used to 
gather information, and construct and deduce the fault tree. 
However, again there are no clear cut programs to fit any 
specific case - thus the need for development of new programs 
might be necessary. Another problem in fault tree modeling 
is that it is difficult to apply Boolean logic to describe 
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failures of system components that can be partially success- 
ful in operation (i.e., a transmission system that might 
function, but not at a 100% level or leakage through a valve 
are two examples) and thereby have effects on the performance 
of the system. Another problem area is, that to apply the 
cost/benefit analysis quantitative evaluation of the fault 
tree is required. As a consequence in many cases we are faced 
with the problem to apply probabilities to the "man" since 
human failure or error cases is very difficult to be predicted 
and probabilities assigned. 

As a last remark it should be pointed out that fault tree/ 
cost-benefit analysis does not seem to be a proper methodology 
for evaluation of the overall performance of an organization 
but it is suggested for use in evaluating the effectiveness 
of specific areas, and particularly where there is an indica- 
tion of potential hazard. 

The review of various methodologies for measuring safety 
performance has indicated that further improvements in this 
area might be attained if additional effort was focused on 
cost related measures that will account not only for the 
effectiveness of existing safety programs but also for the 
effectiveness of those programs that continuously are modified 
to meet future requirements based on passed experience. The 
next chapter will concentrate on measuring occupational 
safety performance based on the above concept. 
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IV. AN APPROACH TO THE PROBLEM OF MEASURING SAFETY PERFORMANCE 



Before trying to approach the problem of measuring safety 
performance two questions should be answered. These are: 

a. Why measure safety performance? And 

b. If measuring safety performance is a requirement, 
then what should be the measurement criterion? 

It is not so difficult to answer the first question. There 
are many reasons dictating that measuring safety performance 
is a must. Measurement of safety performance provides a 
tool by which to judge its contribution in achieving the 
overall goals of an organization. Based on these measurements 
future predictions can be made. These measurements contribute 
mainly to control the current situation and predict the 
future. 

The second question may be answered by choosing among the 
various criteria that already exist such as the "frequency 
criterion" or "severity" or "cost" or "lost man hours", etc. 

The most appropriate criterion chosen here is the "cost cri- 
terion" . The reasons for choosing this criterion are the 
following ; 

a. It is an easily understandable concept by management. 

b. It is appropriate in making comparisons among alterna- 
tives . 

c. It is an immediate indicator of the effective 
allocation of the safety budget. 
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d. Hidden costs become apparent and it becomes easier 
to trace whether we are moving within the bounds of the 
budgetary constraints. 

e. The safety function as a positive contributor to 
overall organizational efficacy will be more appreciated. 

After the criterion for measuring safety performance has 
oeen established an approach to the problem of measuring 
safety performance is possible. 

This approach can be based upon seven main steps. These 
steps can be patterned after OSHA requirements and are as 
follows : 

a. Preparation of the accident records according to 
Occupational Safety and Health Act (OSHA) requirements. 

b. Coding of these data according to organizational 
structure to create an appropriate computer file. 

c. Determination of the total (overall) safety related 
:ost. This is a current measure of safety performance. 

d. Determination of the average cost for each type of 
accident/incident . 

e. Data analysis to develop a safety model. Based on 
this model future accident predictions can be made, provided 
that no significant changes in the safety program have been 
accomplished . 

f. Computation of an expected total cost figure. 

g. Cost/benefit analysis study of hazardous areas to 
identify alternatives to reduce the expected cost. 
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A detailed analysis to accomplish the above steps is given 
below. 

Step (a) . Preparation of the accident records . Prepara- 
tion of the accident records is a very significant step since 
the overall approach is initially based on this recordable 
information. 

The following records are required to be maintained by 
each employer with over seven employees according to OSHA. 

a. Log of occupational injuries and illnesses OSHA form 
100 or lOOF modified (see figure 10) . 

b. Supplementary record of occupational injuries and 
illnesses, OSHA form 101 (see figure 11). 

c. Summary-occupational injuries and illnesses, OSHA 
form 102 (see figure 12) . 

According to Showalter (1976) the log of recordable injuries 
and illness (form 100) should maintain all recordable occupa- 
tional injuries and illnesses for that establishment. Each 
recordable occupational injury and illness should be entered 
into the log not later than 6 working days after the informa- 
tion about a recordable case has occurred. 

Since this record is sufficient to provide all necessary 
information concerning the present methodology instructions 
for completing each column of this form, according to OSHA, 
are discussed below. 

Column 1 . Column 1 refers to Case or file number. Any 
number may be entered which will facilitate comparison with 
supplementary records. 
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Figure 10: Log of Occupational Injuries and Illnesses, Form OSHA - 100 

(Taken from Petersen, D. [1975] , pg. 19) 

*Note: Column 9 is sometimes referred to as 9A, and 9B. 
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OSHA No 101 
Case or File No. __ 



Form approved 
OMB No 44R U53 



Supplementary Record of Occupational Injuries and Illnesses 

EMPLOYER 

1. Name 

2. Mail address 

iN« and airerl) 'Ciiv or lo»nt 'Siatel 

3. Loration. if differeni from mail address 

INJIRED OR ILL EMPLOYEE 

i Name Social SecuriJv No. 

I First nam»l ' 'fiddk oamel Last namel 

3. Home address 

iNo sad »i reel I I CitT or lownt 'Slate! 

6. A>te 7. Se^r Male Female ‘Check inet 

8. Occupation ... 

(Enier reaular job iitle, nor ihe specihc ai ii*ilY he »js performing at nme of injury.) 

9. Department 

'Enter name of deparimeni or division in »hich ihe injured person is fesulariy emplored, e*en 
'houib he may have been temporarify oorking in mother lieparimeni ai ibe lime of injuiT.t 

THE ACCIDENT OR EXPOSLRE TO OCCL RATIONAL ILLNESS 

10. Place of accident or etposure 

• No and SI reel I ‘Ciiyoriawni 'Slate) 

If accident or exposure occurred on employer’s premi.«es. give address of plant or establishment in which 
It occurred. Do not indicate department or division within the plant or establishment. If accident oc> 
curred outside employer’s premises at an identifiable address, give that address. If it occurred on a pub- 
lic highway or at any other place which cannot be idenlified by number and street, please provide place 
references locating the place of injury as accurately as possible. 

11. place of accident or exposure on employer's premises? lYcs or No» 

12. What was the employee doing when injured? 

< B« specific. H he was using looit or efyoipmetil or handling maleriif. 

name 'hrm and tell what he oas doing wiib ihem. ) 



13. How did the accident occur? — 

‘Describe lallv ihe eveois which resulied in ihe >njurs or occuoaiionaf lilnest T»ll what 
happened and bow it happened Name any objects or substances jo»ol»ed md lell how ihey were inyofved. Give 
fufi derails on al) factors which led or coninbuied to the accid'ni. t'se s^pataie sheet for addiiionsi space i 

OCCUPATIONAL INJURY OR OCCUPATIONAL ILLNESS 
14 Describe the injury or illness in detail and indicate the part of body aHected. 

'eg.; smputaiion of right indei finger 

al second joini ; fraclure of rt0» lead poisoning; Hermaiiiis of left hand, etc.) 

15. Name the object or substance which directly injured the employee For example, the machine or thing 
he struck agamst or which struck him. the vapor or poison he inhaled or swallowed; the chemical or ra- 
diation which irritated his skin; or in casea of strains, hernias, etc., the thing he was lifting, pulling, etc.) 



16 Date of injury or initial diagnosis of occupational illness .............. 

'Dale! 

17. Did employee die? 'Yes or N«i 

OTHER 

18. Name and address of phvsician ... 

10 If hospitalised, name and address of hospital 

Date of report Prepared by 

Official position 
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Figure 11; 



Supplementary 
Injuries and 



Record of Occupational 
Illnesses, Form OSHA - 101 



(Taken from Petersen, D. 



[1975] , pg. 23) 
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OSH A No. J02 



Form Approved 
OM8 No 44R 1453 



Summary 

Occupational Injuries and Illnesses 



Esiablishmenl Name and Addreaa 



" 1 
I 

Iniurr and llln<*»a Cairiorr 


f - 

1 

S 


Lost ^'nrVdas Cases 


1 Nonfa'al Ca^es Wiihoul 
Lo«l Woradan* 


Number 

of 

4 


Number 1 

of Cases 
Ineolvini 
Permaneni 

Annihrr Job 

nation of 
Emplosmeni 

5 


1 

1 

1 Number of 
1 Losi 

Workdars 

i 

IS 


1 

umber 

Cases 

i 

I 

1 7 


of Ca*es 

1n»ol».na 
Trantler lo 
Anoiher Jol» 

nation of 
Emplormenl 

3 


. rair-*nr» 

1 1 2 


10 , 


■ Occupational Injunea 










L . 




{ Occupoitonni /Un^sses 

21 ^ Occupafional Skin [)iaea«ea or 
Diaorders 

L . . 






i 


1 


1 

i 




22 ' 


Dual diaeaaea of the lungi 
f pneumoconioaea ■ 












23 


Reapiratorv condilinna due lo 
fotic aaenis 






1 1 


'I " 

1 




24 


Poiaoninp 

lavaiemic effects of tone 
materials) 






1 

1 




25 1 


I Disorders due Co phvsu al aaenis 
1 (other than toxic materials I 

1 






1 ; 
1 ! 
1 ! 








26 


Disorders due lo repealed trauma 






I 




1 


29 


AH other occupational illnesses 




i i 


! 


'j 1 




Total— ^rupational illnesses 

I (2120) 








1 1 




Total — occupational lojunes j 

and illnesses | 


! 1 

1 



‘Nonlaial Wiihnot Lrnl Workdara — <"a«ra rriuluna la 'trdical irrilmefil brirond fir«l iid. diacno^ii o( 'irrupational 

ijinrta. loaa i>1 conaciou^o^a. rr^lrirlian of wnrli Of >w><ioii, or 'tjfi«(rr lo looihrr loli <»ilhool io»l workdaT*) 



Figure 12: Annual Suininary of Occupational Injuries 

and Illnesses, Form OSHA - 102 

(Taken from Petersen, D. [1975], pg* 21) 
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Column 2 . Column 2 refers to date of injury or illness. 

For occupational injuries enter the date of the work accident 
which resulted in injury. For occupational illnesses enter 
the date of initial diagnosis of illness, or, if absence 
occurred before diagnosis, the first day of the absence in 
connection with which the case was diagnosed. 

Column 3 . Column 3 refers to Employee's name. First 
name or initial, middle initial, last name. 

Column 4 . Column 4 refers to the occupation. Enter the 
occupation title of the job to which the employee was 
assigned at the time of injury or illness. 

In the absence of a formal occupational title, enter a 
brief description of the duties of the employee. 

Column 5 . Column refers to the department. Enter the 
name of the department to which employee was assigned at the 
time of injury or illness, whether or not employee was actually 
working in that department at the time. In the absence of 
normal department titles, enter a brief description of normal 
workplace to which employee is assigned. 

Column 6 . Column 6 refers to the nature of injury or 
illness and part(s) of body affected. 

Enter a brief description of the injury or illness and 
indicate the part or parts of body affected. Where the entire 
body is affected, the entry "body” can be used. 

Column 7 . Column 7 refers to the injury or illness code. 
Enter the one code which most accurately describes the nature 
of injury or illness. A list of codes appears at the bottom 
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of the log . A more complete description of occupational 
injuries and illnesses appears below in "definitions". 

Column 8 . Column 8 refers to fatalities. If the occu- 
pational injury or illness resulted in death, enter date of 
death. 

Column 9A . Column 9A refers to lost workday cases. Enter 
a check for each case which involves days away from work, or 
days of restricted work, activity, or both. Each lost workday 
case also requires an entry in column 9 or column 10, or 
both. Column 9A is not shown in figure 10. 

Column 9B . Column 9B refers to lost workdays - days away 
from work. Enter the number of workdays (consecutive or not) 
on which the employee would have worked but could not because 
of occupational injury or illness. The number of lost work- 
days should not include the day of injury or onset of illness 
or any days on which the employee would not have worked even 
though able to work. Note: For employees not having a regu- 

larly scheduled shift, i.e., certain truck drivers, construc- 
tion workers, part-time employees, etc., it may be necessary 
to estimate the number of lost workdays. Estimates of lost 
workdays shall be based on prior work history of the employee 
and days worked by employees, not ill or injured, working in 
the department and/or occupation of the ill or injured employee. 

Column 10 . Column 10 refers to lost workdays - days of 
restricted work activity. Enter the number of workdays 
(consecutive or not) on which because of injury or illness; 
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1. The employee was assigned to another job on a 
temporary basis. 

2. The employee worked at a permanent job less than full 
time , or 

3. The employee worked at a permanently assigned job 
but could not perform all duties normally connected with it. 

The number of lost work days should not include the day 
of injury or onset of illness or any days on which the employee 
would not have worked even though able to work. 

Column 11 . Column 11 refers to non-fatal cases without 
lost workdays. Enter a check in column 11 for all cases of 
occupational injury or illness, which did not involve fatali- 
ties or lost workdays but did result in transfer to another 
job or termination of employment or medical treatment, other 
than first aid or diagnosis of occupational illness, or loss 
of consciousness. 

Column 12 . Column 12 refers to transfer to another job 
or termination or employment without lost workdays. If the 
check in column 11 represented a transfer to another job or 
termination of employment with no lost workdays, enter another 
check in column 12. 

Some additional instructions for completing this log of 
occupational injuries and illnesses with definition of terms 
for use in recording occupational injuries and illnesses will 
be discussed for completeness of step one. 

Initialing requirement . Each line entry regarding an 
occupational injury or illness must be initialed in the right 
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hand margin by the person responsible for the accuracy of the 
entry. Changes in an entry also must be initialed in the 
affected column. 

Changes in extent of or outcome of injury or illness . If 
there is a change in an occupational injury or illness case 
which affects entries in columns 9, 10, 11 or 12, the first 
entry should be lined out and a new entry made. For example, 
if an injured employee at first required only medical treat- 
ment but later lost workdays, the check in column 11 should be 
lined out and the number of lost workdays entered in column 9. 

In another example, if an employee with an occupational ill- 
ness lost workdays, returned to work, and then dies of the 
illness, the workdays noted in column 9 should be lined out 
and the date of death entered in column 8. An entry may be 
lined out if later found to be a nonoccupational injury or 
illness . 

Definition of terms for use in recording occupational 
injuries and illnesses . Definition of terms for use in 
recording occupational injuries and illnesses are as follows: 

Occupational injury . Occupational injury is any injury 
such as a cut, fracture, sprain, amputation, etc., which 
results from a work accident or from exposure in the work 
environment . 

Occupational illness . Occupational illness of an employee 
is any abnormal condition or disorder, other than one resulting 
from an occupational injury, caused by exposure to environmental 
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factors associated with his employment. It includes acute 
and chronic illnesses or diseases which may be caused by 
inhalation, absorption, ingestion, or direct contact, and 
which can be included in the categories as listed below. 

The listing that gives the categories of occupational 
illnesses and disorders that will be utilized for the purpose 
of classifying recordable illnesses can be seen in figure 10 
under the term "illness codes". The identifying codes are 
those to be used in column 7 of the log. 

Recordable occupational injuries and illnesses . Recorda- 
ble occupational injuries and illnesses are any occupational 
injuries or illnesses which result in: 

1. Fatalities, regardless of the time between the injury 
and death, or the length of the illness; or 

2. Lost workdays cases, other than fatalities that result 
in lost workdays; or 

3. Nonfatal cases without lost workdays, which result in 
transfer to another job or termination of employment, or 
require medical treatment, or involve loss of consciousness. 
This category also includes any diagnosed occupational ill- 
nesses which are reported to the Agency but are not classi- 
fied as fatalities or lost workday cases. 

Step (b) . Coding of the accident data . Coding of the 
accident data according to organizational structure is a 
requirement for two main reasons that is, of storing the 
accident data in a computer for developing a "data bank". 
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and to be able to manipulate these data using a computer if 
necessary, to develop a safety model. 

Coding depends on information required to be stored for 
future use. Suppose that the following information is necessary 
to be stored concerning each accident. 

Year, month, day and day of the week that the accident 
occurred. This information may be taken from the accident 
log. The day of the week may be represented by one of the 
integers 1 to 7 indicating the corresponding days Sunday 
through Saturday. 

Other information needed to be coded are the occupations 
and departments. Two integer numbers with sufficient number 
of digits depending on the size of the company may be used 
to code this information. That is, if in a company with 80 
distinct occupations and 20 departments, two integer two digit 
codes are enough. Also the injury or illness code, number of 
deaths, lost workdays, and nonfatal cases without lost workdays 
as well as the cost of each accident may be coded and included 
in the computer file. 

The next step is to determine the total safety related 
cost of each accident from which the overall safety related 
cost for a year will be determined. 

In general the approach to this step is to evaluate the 
total cost of each accident as the sum of the two costs, 
direct and indirect, by following the detailed analysis as 
given below. The cost of each accident may be included in 
the data file as discussed above. Another cost that will 
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be calculated is the average cost for each type of occupa- 
tional injury or illness as will be discussed later. 



Step (c) . Determination of the total costs . The total 
safety related costs of a company are composed of both fixed 
and variable costs in the following relationship. 



The fixed cost term is the sum of three terms: F^, F^, 

where : 

F^ = The cost of safety related overhead, 

F2 = The cost required for compliance with govern- 
ment standards. 



The variable cost term is that cost associated with, and as 
a result of some type of accident. It is the sum of five 
different terms, each of which is the total cost of all acci- 
dents of a particular severity. 



TOTAL COST 



FIXED COST + VARIABLE COST 



F^ = The cost of elementary long term hazards 



VARIABLE COST 




with : 



n 




The sum of A^, 



• • • / 



A for the first 
n 



second, third, etc.. 



accidents of type A. severity . The same 
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holds for 



m j k 1 

I B. , I C. , Id., I E. where 

i=l ^ i=l ^ i=l ^ i=l ^ 

n 

I A. = Total cost of accidents where most severe 
i=l 

injury resulted in a permanent total disability or death, 
m 

y B. = Total cost of accidents where most severe 
i=l ^ 

injury resulted in a temporary total disability requiring 
absence from work for more than one week, 

j 

y C. = Total cost of accidents where most severe 
i=l ^ 

injury resulted in absence from work for less than one week, 
k 

y D. = Total cost of accidents where most severe 
i=l ^ 

injury resulted in absence from work for less than one day, 

1 

y E. = Total cost of accidents where there was 
i=l ^ 

no injury but material damage occurred or production was lost. 

The total cost equation can be written with all its 
components as : 



n m j k 1 

TOTAL COST = + F + F + I A. + I B. + I C. + I D. + I 

^ ^ i=l ^ i=l ^ i=l i=l i=l 



where : 



n+m+j+k+1 = Total number of accidents over 

a year . 
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A seriGS of data collection worksheets were developed to 
obtain accurate figures for input in the total cost equation. 

The first worksheet was designed to obtain the values associated 
with the fixed cost term of the equation. The second work- 
sheet was an exhaustive survey of accident related costs 
for input into the variable term of the total cost equation 
(see figures 13 and 14, worksheets one and two). 

So far a measurement technique of safety performance has 
been developed expressed as the overall safety related cost 
or "Total Cost" paid by a company in a year. Comparisons of 
this figure with previous years "Total Costs" enables the 
management to appreciate the effectiveness of the safety 
program and contribution of safety department to the company's 
goals . 

To appraise the effectiveness of current safety programs 
an "Expected Total Cost" figure should be developed. 

Step (d) . Determination of the average cost for each 
type of accident . Determination of the average cost for each 
type of accident may be accomplished by utilizing the following 
logical approach. Based on the information collected using 
the worksheets discussed above, average cost for each type 
of accident A, B, C, D, and E may be computed as: 



'A (AV) 



= Average cost for type A accident 



= ( 



Ft + F_ + F- , n 

1 2 3 . ^1 V 

n+m + j+ k + 1' n i 
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WORKSHEET ONE 



DETERMINATION OF FIXED COSTS (ANNUAL BASIS) 



Fixed Cost = ^2 ^3 



F^ : Overhead costs 

A. Insurance Cost 

(Future insurance cost can be estimated by 
projecting previous years insurance cost.) 

B. Safety Department Salaries 

1. Primary safety personnel safety 
director's salary 

Doctor's salary (if applicable) 

Nurse's salary 

Other primary safety personnel 

2. Secondary safety personnel 

Attendees at safety meeting 
(Number of hours at meetings times 
hourly wage plus travel expenses) 

C. Percent Cost of company overhead for safety 
office (space and equipment) 

D. Safety Department operating budget 

E. Hiring cost incident to safety 
(x-rays, medical/psychological exams) 

G. In General other fixed expenses (Depending 
on the structure of the company) 



Total F^ Cost 



Figure 13 
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II. F^: GOVERNMENT COMPLIANCE COST 

A. Safety Equipment 

(If not included in safety department 
budget) include protective clothing, 
goggles, shoes, etc.; fire fighting 
equipment (purchase and maintenance) 

B. Training 

1. Cost of training personnel to 
comply with OSHA or other 
government standards (include 
manhour cost of instructors 
and employees plus training 
material) 

2. Ongoing training (First aid, 
driver training, etc.; 
include manhour cost of 
instructor and trainee 

plus cost related to this 
training gas etc.) 

3. Cost of drills (fire fighting 
etc., include manhour times 
plus all the related to the 
drill costs) 

C. Cost to acquire or remodel equipment 

to meet OSHA or other, government 

standards 

Total F 2 Costs 



Figure 13 (Continued) 
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III. : Elementary Long Term Costs 

A. Cost to eliminate long term occupational 

or health hazards (if not included 

previously), include research costs, 
inspection and monitoring costs (manhours 
times wages, etc.) 

B. Cost related to environmental 
protection measures 

Total Cost ^ 

Total Fixed Cost (F^^ + F 2 + F^) $ 

Given that we have traced these fixed costs for previous 
years we may easily predict the expected fixed cost of next 
year based on these figures. 



Figure 13 (Continued) 
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WORKSHEET TWO 



DETERMINATION OF VARIABLE COSTS (FOR EACH ACCIDENT) 

I, Type of Accident 

A. Most severe injury resulted in 
permanent total disability or death. 

B. Most severe injury resulted in 
temporary total disability or 
absence from work for more than 
one working week. 

C. Most severe injury resulted in 
absence from work less than one 
week. 

D. Most severe injury resulted in 
absence from work for less than 
one day. 

E. No injury but material damage 
occurred or production time 
was lost 

II. Wages lost 

A. Lost time wages - personnel other 
than the injured workers 

1. Non-injured workers who assisted 
the injured workers (hours off 
job times hourly wage) 

2. Non-injured workers who stopped 
work to observe the happenings 
(hours lost times wages) 



Figure 14 
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3. Non-injured workers who 

stopped work due to machinery 
shutdown or until replacement 
was obtained for injured worker 

B. Lost time wages - injured personnel 

1. Lost time on job on day of 
occurrence (hours times wages) 

2. Wages for subsequent days 
absent from work. 

3 . Wages for hours lost for 
medical treatment after 
returning to work 

4. Percent wages lost due to 
decreased output after worker 
returned to job. 

C. Lost time - Supervisors 

1. Lost salary /wages in direct 
involvement with accident 
(on scene assistance or 

supervision) 

2 . Salary /wages required for 
filling out necessary 
reports and forms 

D. Lost time - higher level management 

(includes lawyer of the company) 

1. Direct involvement with accident 
(salary rate times hours spent) 

2. Time devoted to follow-up function 
(meetings, investigations, not including 
fixed cost of safety department) 

Figure 14 (Continued) 
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E. Start-up wages 

1. Wages of personnel required to 
get plant back to normal 
operating speed 

2. Overtime wages (if necessary) 
caused by getting plant back 
into normal operation 

3. Wages of personnel brought 
in to clean up accident area 

4. Wages of personnel brought 
in for non-productive 
observation/monitoring (securing 
guards, fire watches, observers 
to ensure pressure, temperature, 
etc., are maintained) 

III. Production Lost 

A. If lost production was recouped 

1. Overtime wage rate differences 
to recoup lost production 

2. Supervisors salary for overtime 

3. Utility costs required for overtime 

B. If lost production was not recouped 

1. Value of goods lost 

2. Cost to purchase goods or 
materials from other companies 
to continue with production 

or meet deadline 



Figure 14 (Continued) 
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IV. Follow-up Costs 

A. Cost of OSHA fines 

B. Cost of production lost due to 
government shutdown 

C. Cost of obtaining replacement 
for injured worker (hiring cost 
and training costs) 

D. Production loss due to replacement 
worker operating below normal output 

E. Lost wages due to retraining other 
personnel in new or correct procedures 
as a result of accident. 

V. Medical Cost (other than insurance) 

A. Doctor and hospital bills 

B. Costs of medical treatment 

C. Costs of prosthetic devices 
(wheel chair, etc.) 

D. Cost of altering work area to 
retain disabled worker 

E. Anticipated (estimated) increase 
in insurance rates as a result of 
accident (based on a loss 
experience modification factor) 

VI. Equipment Cost 

A. Replacement or repair of 
damaged equipment 

B. Cost to redesign or build equipment 
(to remove/correct hazards) 

Figure 14 (Continued) 
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C. Cost to rental equipment required 
to continued production 

VII. Off-Job Accidents 

A. Wages lost due to absenteeism 
because of off-job accidents 

VIII. Other Costs 

A. Lost profit on orders lost due 
to accident 

B. Loss of bonuses to company 

C. Demurrage cost 

D. Lost profit due to loss of reputation 

E. Loss of profit due to labor strikes 

TOTAL VARIABLE COST 



Figure 14 (Continued) 
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'B (AV) 



= Average cost for type B accident 



= ( 



^2 ^3 

n+m + j + k + 



m 



r> ^ k 



Cc (AV) ~ Average cost for type C accident 



F + Fj + F 

= (_± z £_) 

n+m + j + k + l 




^D(AV) ~ Average cost for type D accident 
F, + F- + F ^ k 

= ( — i r ~ ) + _ y D 

'n+m + j+k+1^ k i 

1=1 



(AV) 



Average cost for type E accident 



F + F + F 1 

(li— i—ll-) + 1 y E 

\n+m + j+ k + l^ 1 .^,i 
-* 1=1 



Since those average costs are approximate figures for 
each type of accident a better approximation may be achieved 
utilizing the data of as many years as possible. 

Step (e) . Data analysis study . Data analysis study is a 
major step of this approach since by analysing the safety 
data information concerning accidents versus occupations or 
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departments or days of the week, etc., may be extracted. 

This will help to identify hazardous areas. Also the accident 
model may be developed. This model is likely to follow a 
"Poisson process" or might be a linear or non-linear regression 
model depending on the shape of the accident sample distribu- 
tion. The development of the accident model enables the 
decision maker to make future predictions concerning the 
expected number of accidents. Thus, the computation of an 
expected cost figure which in the next step becomes feasible. 

The use of a computer might be a required tool for completion 
of the data analysis study. 

Step (f) . Computation of an expected total cost figure . 
Computation of an expected total cost figure based on the 
information gained from steps d and e are as follows : 

1. Having estimated an average cost figure for the 
various types of accidents and having developed an accident 
model the "Expected total cost" can be found as a function 

of the expected number of accidents and of the various average 
costs. This "Expected total cost" figure is a measure of 
future safety effectiveness since it indicates the expected 
total accident cost of next year, assuming that there are no 
changes in the safety program. 

2. This figure can be improved by utilizing the cost/ 
benefit analysis of the last step. 

Step (g) . Cost/benefit analysis . Cost/benefit analysis 
as discussed in Chapter II. G should be conducted for the most 
hazardous areas. This analysis will identify which alternatives 
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have the best cost/benefit figures. Adopting these alterna- 
tives a reduction in the number of the accidents should be 
expected. Thus a new expected number of accidents should be 
considered and a "New expected total cost" figure may be 
estimated. 

This concludes the proposed methodology to the problem of 
measuring safety performance. It becomes apparent from the 
above discussion that it is not a clear cut methodology and 
a lot of work and time should be devoted to develop the various 
steps. The difficulties such as correctly completing cost 
worksheets; assigning probabilities to human beings and 
determining the potential for human error during the develop- 
ment of the cost/benefit step; developing the proper accident 
model, etc., will be faced and should be overcome. 

But regardless of these difficulties this methodology 
is a logical approach to the problem of measuring safety 
performance . 

The following chapter deals with the analysis of real 
occupational safety data of the civilian personnel of NPGS . 

The given data were collected as described in step (a) above. 
They were coded as per step (b) and were analyzed as per 
step (e) . Finally some problem areas concerning the analysis 
of real safety data are discussed. 
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V. ANALYSIS OF REAL SAFETY DATA 



The occupational injuries and illnesses data of the 
civilian personnel of the NPGS for a period of four years 
(1975-1978) were studied. 

The purpose was to indicate with real safety data how 
the steps of coding and analyzing real safety data may be 
accomplished in a particular case. These steps with the 
cost/benefit analysis step as already discussed in Chapter II, A 
are major steps in the proposed methodology. Second, to 
appraise that today ' s needs require the safety manager to 
be supported by safety analyst personnel. 

The data have been taken from the existing files in the 
NPGS "Log of Occupational Injuries and Illnesses" OSHA no 
100 and lOOF modified. 

Coding of the data . The coding of the data was performed 
as follows. Three codes were developed, one for the days 
of the week as presented in table II, one for the occupations 
as presented in table III, and a last one for the departments 
as presented in table IV. The last two codes were based on 
the log information, thus it is likely not all the occupations 
nor all the departments are included. The coded information 
along with some additional information taken from the log 
were stored in a computer file, in the following structure. 

Computer File FTOIFOOI . This file contains the given 
accident data which have been sorted in ascending date order. 
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It was then observed that a small percentage (about 10%) of 
no cost accidents had occurred on the same day (ties) . 

Since the tied accidents were accounted for only a small 
percentage of the overall five years data and since no one 
of those produce any total or partial workday loss they were 
eliminated. The file was structured as follows. Columns 
1-3 refer to the date of the accident (year, month, day), 
column 4 designates the day of the week according to code I. 
Column 5 corresponds to the occupation based on code II. 

Column 6 corresponds to the department code III. Column 7 
corresponds to the injury or illness code of OSHA, and 
colximns 8, 9 correspond to the total or partial lost work 
days respectively. 

Computer file FT02F001 . The structure of the second file 
is just a one column four vector structure which represents 
the interarrival times in days between accidents, and is 
separated into four parts (vectors) each of which corresponds 
to one year period (1975-1978). 

Analyzing the data . With the use of an IBM-360 computer 
the following work was completed. 

1. Five tables were produced for; the 7 days; 12 months; 
4 years; 72 occupations and 45 departments. In those tables 
information concerning the total number of accidents (TOT-AC) , 
the type of accident (Types A, B, C for accidents that did 
not produce any work days lost, that produced partial days 
lost and that produced total days lost respectively) , and 
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the total number (TL-DAY) and partial number (PL-DAY) of 
days lost are available. 

2. Developed the following 5 charts for years, months, 
weeks, occupations and departments vs total number of acci- 
dents, total and partial days lost. 

3. Histograms of the interarrival (or interevents) 
times of the accidents were developed for each year and each 
week in order to gain an understanding of whether the acci- 
dents were following any particular distribution pattern. 

For some weeks, where the sample sizes was too small, that is 
less than 10 accidents, it was not possible to get a histo- 
gram. With the histograms all the information concerning 
central tendency, spread, higher central moments were avail- 
able . 

4. Having developed the histograms it was reasonable to 

assume that the distribution of the interarrival times of 
each year were following an exponential distribution with 
means = 6.471, M 2 = 4.329, ~ 5.166, and y^ = 5.185 for 

the accidents of the years 1975 through 1978 respectively. 

For verification of the above a Kolmogorov-Smirnov test was 
performed by means of the NKSl existing library subroutine. 

Results . Results based on the above work were as follows 
From the developed tables and charts more accidents occur on 
Fridays and less on Sundays and Saturdays but more or less 
the number of accidents is evenly spread during the week 
days Monday to Fridays . 
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Concerning the months, January and December are the 
months with lowest frequency of accidents where February 
and November are those with the greatest frequency. But 
again more or less the accidents are evenly spread during all 
months. Concerning occupations those with the largest number 
of accidents are the clerks, laborers, pipefitters, gardeners 
and food service employees. A total number of 409 work-days 
lost and 28 partial-days lost occurred. 

Concerning departments those with the largest number of 
accidents were the Public Works, Naval Exchange, COMO and 
supply departments. 

Cost Analysis . A cost analysis was performed based on 
rough cost figures given by the safety department of the 
NPGS. Those figures were an average direct cost of 8.38 
dollars/hour for every occupation and the amount of 300 
dollars for a "back case" injury which roughly speaking repre- 
sents the medical bills. 

Based on the above given figures it was not possible to 
determine a total cost figure as discussed in Chapter IV and 
only a rough total cost estimate was evaluated as follows. 
Daily average direct cost figure = Average hourly cost x 
8 hrs = 8.38 x 8 = 67.04 dollars/day lost. 

Since there were 

409 total days lost x 67.04 dollars/day lost 
= 27,419.36 dollars, and 
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since there were 



28 partial days lost x dollars/half day = 938.56. 

Thus rough average total direct cost = 27,419.36 + 938.56 
= 28,357.92 dollars. 

A 4 year Accident Model of the NPGS (from 1975-1978) . 
According to Ross (1970) a stochastic process {N(t), t ^ 0} 
is said to be a counting process if N{t) represents the total 
number of events which have occurred up to time t. A particu- 
larly important counting process is the Poisson process 
defined as follows : 

The counting process {N(t), t ^ 0} is said to be a 
Poisson process if 

(a) N(0) = 0 

(b) {N(t), t ^ 0} has independent increments. That is 
the number of events which occur in disjoint time 
intervals are independent 

(c) The number of events in any interval of length t 
is Poisson distributed with mean Xt. That is, for 
all s, t ^ 0 

—At ( At) ^ 

Pr{N{t+s) -N{s) =n} = e — — , n = 0, 1, .... 

n « 

From condition (c) it follows that a Poisson process has 
stationary increments, that is the distribution of the numbers 
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of events which occur in any interval of time depends only 
on the length of the time interval, and also that 
E[N{t)] = At and A is called the rate of the process. 

The following theorems concerning the Poisson process are 
essential for the establishment of the accident model. 

Theorem 1 . If {N(t), t ^ 0} is a Poisson process then the 

inter-arrival (or inter-event) times i ^ 0} 

are independent identically distributed exponential 
(A) 




S T = T,+T„ + . . .+T , 

n-1 1 2 n-1 




S = T. + . . 
n 1 

» 



+T 

n 



Corollary 1 . If {N^, t ^ 0} is a Poisson process then the 
waiting times + . . . + T^, n ^ 1 } are 

Gamma distributed with parameters n and A . 

Theorem 2 . If the inter-event times {T^, i ^ 1} of a 

counting process {N^, t ^ 0} are independent 
identically distributed Exponential (A) then 
{N(t), t > 0} is a Poisson process with rate A. 



To develop the accident model of the NPGS it was assumed 
that N(t) = the number of accidents which have occured at 
NPGS at or prior to time t, where the time t is measured in 



days. 



If T^, T 2 -T^, T 2 -T 2 , ... represent 

inter-event) times of the first, second. 



the interarrival (or 
third, ... accidents 



1 1 Q 



then those interarrival times are independent and identically 

distributed. Examining these interarrival times for each 

year separately and having performed the appropriate 

Kolmogorov- Smirnov tests (see summary of results in table V) 

we accept the hypothesis that the interarrival times are 

independent and identically distributed random variables 

each with an exponential distribution with mean = 6.4716, 

^2 = 4.329, U 3 = 5.166, = 5.185 = 0.15) = 0.22) 

(I 3 = 0.19) (A^ = 0.19) , where y^, X^ are the mean and 

parameter of the exponential distribution of the data of the 
. th 

1 year. 

Thus according to theorem 2 above, each year from 1975 to 
1978 the occupational injuries and illnesses models were 
following a Poisson process, with rates 

X^ = 0.15 accidents/day for 1975 

= 0.22 accidents/day for 1976 

A^ = 0.19 accidents/day for 1977 

A^ = 0.19 accidents/day for 1978 

Based on these findings we may consider that the 1979 
accident model is likely to follow a Poisson process with 
rate 



A 



Ai + A2 + ^3 + 

4 



.75 _ « nn -7 , accidents,, 

_ _ 0.187 ( di7~ 
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Computer Programs . Basically three computer programs were 
developed named as B, DS, and C. Program B was developed 
to calculate the interarrival times of the accidents. 

Program DS was developed to produce the necessary tables and 
plots as already discussed. Program C was developed to 
produce histograms and perform Kolmogorov-Smirnov tests as 
discussed. 

Discussion and conclusions . Having analyzed a four year 
accident data of the civilian personnel of NPGS it was found 
that the 1975 accident model was following a Poisson process 
I with rate A. = 0.15. This was based on a Kolmogorov- test 

where at a level of significance a = 0.10 the accident inter- 
arrival times were accepted to be exponentially distributed 
(A = 0.15), thus the process as already discussed was Poisson. 

Based on the same argument it was found that the 1976, 

1977, and 1978 accident models were Poisson distributed. 

By utilizing these results it was found reasonable to predict 
the 1979 accident safety model as Poisson distributed too. 

The validity of this model, as well as most accident 
models, for future predictions is based upon the assumption 
that no change in the safety program has been accomplished. 

If so the expected number of future accidents may be predicted. 
But in general this might not be true since the moment an 
accident occurs or after the investigation process of an 
accident have been completed some causes and problem areas 
become apparent and correction measures are established. 
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Those measures influence the model and future accident pre- 
diction becomes a problem. But at least this model can be 
used as an upper bound for future expected accidents since 
any corrections made will result in accident reduction. 

Another problem area is that in general the model will not 
account for each type of accident but only for the total num- 
ber. In such a case further analysis of the accident data 
might be necessary to determine the distribution of each type 
of accident. In cases where there is insufficient accident 
data, separate distributions for each type of accident might 
not be feasible. Statistical accuracy requires a large sample 
size. Similar accidents occurring on like equipment may not 
be frequent enough to yield accurate estimates of probability. 

Another important factor that influences the development 
of an accident model is the complexity of the structure of 
the organization. That is companies or organizations with 
more homogeneous activities should be modeled much more easily 
than those with complex and different types of activities. 

Thus the need for studying and continuously analyzing the 
accident model is a must for complex organizations. By sub- 
modeling a complex organization, that is by dividing the 
organization into homogeneous subsets (such as same depart- 
ments, occupations, etc.) each of which is easier to be 
modeled separately. Developing those individual models the 
safety efficiency of individual departments may be studied 
as well as the overall safety corporate efficiency. 
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Though the modeling aspect is in many cases complex and 
the findings are approximations based on the assumptions of 
certain probability distributions nevertheless dose and 
continuous study of accident data reveal a lot of information 
which will help in prevention of accidents as well as estima- 
tion of the cost due to such accidents. 

This safety performance field is an ever expanding area 
for future research and development. 
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TABLE II 



Code I . Coding the days of the week 



Code 

1 

2 

3 

4 

5 

6 
7 



Day 

Sunday 

Monday 

Tuesday 

Wednesday 

Thursday 

Friday 

Saturday 
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Code 

Code 

01 

02 

03 

04 

05 

06 

07 

08 

09 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 

29 

30 



TABLE III 



II. Coding Occupations 

Occupation 

Pipefitter 

Driver 

Laborer 

Service station 

Waitress 

Machinist 

EMD Supervisor 

Open mess Employee 

PW Grounds 

Cook/waiter 

Sales clerk 

Model maker 

Carpenter 

Cashier 

Gardener 

Dishwasher 

Painter 

Mechanic 

Fireman 

Personnel off. 

M.E. Technician 
Chemist 
Meterologist 
NAVEX Storeman 
Professor 
Pestcontr oilman 
Ser. Sta. Attend. 
Warehouseman 
Plate maker 
H.F. lab worker 
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Code 

31 

32 

33 

34 

35 

36 

37 

38 

39 

40 

41 

42 

43 

44 

45 

46 

47 

48 

49 

50 

51 

52 

53 

54 

55 

56 

57 

58 

59 

60 

61 



Occupation 



Boilerman 
Pantry person 
Draftsman PW 
Electronic Tech 
Food Service Wk. 

NAVOCEAN REP. 

Security officer 
Crane operator 
Foreman Aero 
Plumber 
Computer Tech 
Truck Driver 
Manager 
Pest Cntrlman 
Maintenance worker 
Cashier checker 
General Helper 
Ships mate 
Shop planner 
Bartender 

Child care Attendant 
Aero technician 
Yoc 

Janitor 
Greenskeeper 
Multilith op 
Visual Display Art 
Library Tech. 

Voucher Examiner 
Household Goods Inspector 
Messenger 

Table III (Continued) 
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Code 



Occupation 



62 

1 


MVO 


63 


Supply Supervisor 


64 


Barber 


65 


Boat technician 


66 


Claims examiner 


67 


Printer 


68 


Dock Mstr 


69 


Planner/Est. 


70 


Equip. Spec, 


71 


Acania First 


72 


Oceanographer 



Table III (Continued) 
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04 

05 

06 

07 

08 

09 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 



TABLE IV 



III. Coding Departments 

Department 

Public Wks 
Navel Exchange 
Open Mess NAF 
Mech Eng. Dept. 
NPG Staff 
NAF USN 
Gardener 
NPS Open Mess 
EM Galley 
NAVEX 
Aero dept . 

NAVEX 

EPRF-Tech lib 
NAF Golf course 
NAF Bowling Lns 
FNWC 

Fire Dept 
Civ Personnel 
Physics Dept 
Chaplain 
Food Service 
Aero 

Admin NPS 
Supply 

Nat'l Marine Fis 
Print Shop 
Security 
Boiler house 
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Code 

29 

30 

31 

32 

33 

34 

35 

36 

37 

38 

39 

40 

41 

42 

43 

44 

45 



Department 



Open Mess 

Comptroller 

NPS 

C.O.M. 

MSSA/Staff 

Oceanography 

EM Galley 

Recreation 

Aero 

Library 

Av Safety 

EE 

EMD 

Computer Center 
DRMEC 
MARDAC 
RV Acania 



Table IV (Continued) 
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APPENDIX A 



BOOLEAN ALGEBRA BASICS 
DEFINITIONS - SYMBOLS 

Variables ; In Boolean algebra are considered the 
objects, classes, or elements (symbols are letters A, B, X, 
etc . ) . 

Universe: The entire collection or group of all the 

variables under consideration 

" + " = Read as OR is used for the OR operation 

" * " = Read as AND is used for the AND operation 

" - " = Read as NOT (negation) is used for negation. 

For example A (Read A NOT) means the opposite of A that is 
if A had value 0, A has the value 1 and vice-versa (Or true 
and not true instead of 1 and 0) . 

Null and All Elements (,0 and I) : represents all the 

classes that do not and all the classes that do exist 
respectively , 

SUMMARY OF BOOLEAN IDENTITIES 



X+0 


= 


X (0 is 


always 


0) 


X-Y = Y*X 


X+1 


= 


1(1 is 


always 


1) 


X+(Y+Z) = (X+Y)+Z 


x+x 


= 


X 






X(Y-Z) = (X-Y)Z 


x+x 


= 


1 






X(Y+Z) = X-Y+X-Z 


X-1 


= 


X 






X+X-Y = X 


X* 0 




0 






X(X+Y) = X 


x*x 


= 


X 






X+Y-Z = (X+Y) (X+Z) 


x*x 


= 


0 






X+X-Y = X+Y 


X+Y 


= 


Y+X 






X-Y = X+Y 


X = 


X 








X+Y = X-Y 


X- Y 


+X-Y = X 












COMPUTER OUTPUT 
"ACCIDENT TABLES AND PLOTS" 
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TABLE 


FO^ 


DAYS 


OF WEEK 






DAYS 


TO"-AC TYPE-A 


~Y PE-B 


TYPE-C 


TL-CAY 


DL-DAY 


i 


7 


C 


0 


7 


0 


0 


2 


49 


7 


2 


40 


79 


7 


3 


51 


10 


3 


39 


58 


21 


4 


46 


11 


0 


35 


145 


0 


5 


49 


6 


0 


43 


23 


0 


6 


52 


9 


0 


43 


89 


0 


7 


17 


2 


0 


15 


15 


0 
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■^HS 


TOT-i^C 


■ABLE 

TYPE-A 


OF MQMTHS 

TYPE-3 TYP 


rn 

1 

o 


TL-DAY 


PL-OAY 


i 


14 


5 


0 


9 


31 


0 


2 


25 


3 


1 


16 


154 


10 


3 


20 


2 


0 


18 


9 


0 


4 


19 


1 


0 


18 


20 


0 


5 


22 


1 


0 


21 


10 


0 


6 


22 


3 


1 


18 


10 


3 


7 


22 


4 


L 


17 


25 


2 


8 


26 


5 


1 


20 


45 


4 


9 


27 


3 


0 


24 


14 


0 


10 


26 


5 


1 


21 


34 


9 


11 


30 


3 


0 


22 


57 


0 


12 


18 


0 


0 


IS 


0 


C 



TABLE GF YEARS 



YEAR 


TQT-AC 


TYPE-A 


TYPE-b 


TYPE-C 


TL-OAY 


FL-OAY 


1 


53 


7 


3 


43 


39 


9 


2 


82 


14 


1 


67 


92 


10 


3 


66 


14 


0 


52 


217 


0 


4 


70 


10 


1 


60 


61 


9 
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i 
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34 

35 

36 

37 

38 

39 

40 

41 

42 

43 

44 

45 

46 

47 

48 

49 

50 

51 

52 
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54 

55 

56 

57 

53 

59 

60 

61 

62 

63 

64 

65 

66 

67 

68 

69 
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TABLE 
TGT-AC TYPE-A 



19 7 

1 0 

26 1 

2 1 

8 2 

2 1 

1 0 

2 1 

1 0 

5 1 

43 9 

4 0 

6 1 

3 C 

10 2 

1 C 

4 0 

9 2 

2 C 

1 0 

4 C 

1 0 

1 0 

3 C 

5 C 

0 0 

1 C 

7 1 

1 1 

0 0 

3 1 

0 0 

1 0 

9 0 

10 4 

1 C 

9 0 

7 2 

2 0 

3 0 

2 C 

1 1 

4 C 

1 0 

9 0 

2 C 

1 C 

1 0 

0 C 

1 0 

2 0 

1 C 

0 0 

2 0 

1 1 

1 0 

1 c 

6 1 

1 C 

1 0 

1 1 

2 2 

1 0 

1 c 

1 1 

1 0 

2 C 

1 0 

1 1 

1 C 
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6 
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0 

0 

0 

0 

0 

0 
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1 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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0 

0 
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0 

0 

0 

0 

0 
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0 
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G 

0 

0 
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0 
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•B TYPE-C 
11 
1 

24 

1 



1 

1 

1 

4 

34 

4 

5 
3 
7 
1 

3 
7 
2 
1 

4 
1 
1 
3 

5 
0 
1 

6 
0 
0 
2 
0 
1 
9 
6 
1 
9 
5 
2 

3 
2 
0 

4 
1 
9 
2 
1 
1 
0 
1 
2 
1 
0 
2 
0 
1 
1 

5 
1 
1 
0 
0 
1 
1 
0 
1 
2 
1 
0 
1 



TL-DAY 

63 

0 

6 

2 

24 

3 

0 

16 

0 

10 

38 

0 

14 

0 

95 

0 

0 

3 
0 
0 
0 
0 
0 
0 
0 
0 
0 

5 

6 
0 

4 
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0 
0 
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0 
3 
0 
0 
0 
2 
0 
0 

0 
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0 

0 

0 

0 

0 

0 

0 

0 
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0 

0 

3 
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0 
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9 

0 

0 

10 

0 

0 

0 

38 
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0 

4 

C 

0 

C 

0 

C 
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0 

0 

c 

0 
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2 

c 

c 

c 

0 

0 

0 

0 

c 

0 

0 

c 

0 

c 

0 

0 

0 

c 

0 
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90 


15 


5 


71 
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28 


53 


14 


0 


39 
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3 
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YEARS vs. NUMBER OF ACCIDENTS (+) 

YEARS vs. NUMBER OF TOTAL DAYS OUT OF WORK 






V 




1 



MONTHS vs. NUMBER OF ACCIDENTS (+) 
MONTHS VS. TOTAL DAYS LOST (•) 
MONTHS VS. PARTIAL DAYS LOST (*) 



♦ / \ ^ 12U.83 
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WEEKS vs. NUMBER OF ACCIDENTS 
WEEKS vs. TOTAL DAYS LOST 
WEEKS vs. PARTIAL DAYS LOST 
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OCCUPATIONS vs. NUMBER OF ACCIDENTS (+) 
OCCUPATIONS vs . NUMBER TOTAL DAYS LOST ( • ) 
OCCUPATIONS vs. NUMBER PARTIAL DAYS LOST {*) 
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DEPARTMENTS VS. NUMBER OF ACCIDENTS (+) 
DEPARTMENTS vs . NUMBER OF TOTAL DAYS LOST ( • ) 
DEPARTMENTS vs. NUMBER OF PARTIAL DAYS LOST (*) 



COMPUTER OUTPUT 



ACCIDENT HISTOGRAMS AND 
K-S TESTS RESULTS 
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PROGRAM "DS" TO PRODUCE 
TABLES AND PLOTS 
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Jl^ JU WU >1^ V^ WU ^U <JU <JU WU %A# <vV ^A# ^U <U« ^4f ^U WU V> >V ^U WL %A» 

nf^nr^ ^ ^ 55C^3p:jC3^:p3;jr^:5S2^^^-nrn'nrnr-V'^''r*n^-n^^n^-i*^n^3i^n^ 3p-nrnrnr^nrn*n^-nr-r^^-^ 

C ^ACCEPTS AS IMP'JTS T hE ACCIDENTS ACCORDING TO THE * 



C =»CHPONOLOGICAL OCCURANCE AND PRODUCES TABLES CF =!' 

C ^i'ACCIDENTS FOR WEEKS-MQNTHS-YEARS-OCCUDAT IONS- * 

C ^CEFAR^MEN'^S .AL5 0 PPODUCES PLOTS OF 

C =>yEARS VS NO OF ACC IDENTS;TOTAL AND PARTIAL DAYS LOST^ 

C ^^‘MONTHS VS THE ABOVE =» 

C =S'OAYS OF WEEKS VS THE ABOVE =» 

C =!=OCCUPA”I CNS VS ’HE ABOVE ’i' 

C =»OEPARTNENTS VS T HE ABOVE =!» 



C «t. ^ ^ nJU «>, "JL* OU »*<• OU <JU <JL> ^ ^ '<JU ^ U» <JU ^ ^ ■**' >Uf kJL> 5^ JU ^ xU x/U xJU xl« xl» «A» x*<> ^ xAir xAr x»^ 

C 

C 

C 

INTEGER*2 F0RM(27) ,YE(3) ,MON( 3J , QCCU P ( 3 ) » DE^ ( 3 ) 

CIMENS ION IDAY (7, 7 ), IMGN( 12, 7 ), IY5A ( A, 7) , lOCC (72, 7) , 
iIDE°( 45, 7 ), IRE 
-C( 9J , X{ 72 ) , Y( 72 ) ,Z(72) ,N(72) 

CAT A F0RM/2H D,2HAY,2HS , 2H , 2HTO, 2HT-, 2HAC , 2H , 2H 
ITY, 

-2HPE,2H-A ,2H ,2 H"^Y ,2H P E ,2H-B ,2H ,2HTY, 

12HPE,2H-C,2H , 

-2HTL, 2H-D,2HA Y,2H ,2HPL,2H-D ,2.HAY/ 

DATA YE/2H Y,2HEA,2HO / 

CAT A MON/2HMO,2HNT, 2HHS/ 

DATA 0CCUP/2H0C, 2HC L,2HP / 

DATA DEP/2H0E ,2HPA ,2HRT/ 

DA’ A I0AY/49*0/, IM0N/84#0/ , lY EA/28’^0/, IQCC/ 504^0/, ID 
iE3/315=i'0/ 

C 

C PU’ the INDEX IN FIRST COLUMN OF EACH TABLE 
CO 2 1 = 1,72 
IF( I.GT.4 ) GO TO 11 
IYEA( I ,1) =I 

11 IF( I.G’ .7 ) GO ^0 12 
IDAY( I,1) = I 
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12 



IF( I.GT.12) GO TO 13 
IMCN (I ,1} =I 

13 IF( I.GT .45 ) GO ^0 14 

IDEP( I, i) = I 

14 I0CC(I,1)=I 

2 CON'IMUE 
C 

C UPDATE TABLES F CR DAYS MONTHS YEARS OCCUPATIONS 

c departments 

10 READ( 1, 100,ENQ=20) ( I RE C ( I ) 1 1 = 1 » 9) 

IF( IREC( 1) .EQ.O) GO TO 10 
100 FORMAT (9( 12 ,2Xn 

CO 1 J=2,7 
IHELP=IREC( J+2) 

IF( J.GE.6) GO TO 30 

IFU.E0.3.AND.IREC(8).E0.0) GOTO 1 
IF (J .E0.4 . A'lO.IR EC(9 ).E0.0 ) GO TO 1 

IF ( J .E3 .5. AND.( IREC ( 8) .NE.O.OR. I REC( 9) ,NE. 0) ) GO TO 1 
IHELP=1 

3 0 IDAY ( IR EC(4 ), J )= IDAY ( IREC(4), J ) + IhELP 

IMON( IREC (2) , J) = IMON{IREC (2) , J) + IHELP 

IYEA( (IREC I D-74) , J)=IYEA( ( I REC ( 1 J -74 1 , J ) + I FE L = 

I0CC(IREC(5 ) , J) = I0CC(IOEC(5 J, JI+IFEL^ 

IDEP( IREC(6), J)=I0EO(IREC(6) ,J) +IHELP 
1 CONTINUE 

GO ’G 10 
C 

C WPITE THE INJURIES FOR DAYS MONTHS YEARS OCCUPATICNS 
C DEPARTMENTS 
20 WRITE(6,201) 

201 FORMAT! IHl ,2X,////,I7X, ’ TABLE FOR CAYS OF WEEK’, 
1 // ) 

WRITE (6, 300) FORM 
300 FORMAT! 4X ,27A2) 

WRItE!6,200 ) ! (IDAY (I,J),J=1,7),I=1,7) 

WRITE!6,301 ) 



301 F3PMAT( IHi, 2X, ////, 17X, ’ TABLE OF 

1//) 

CO 16 1=1 ,3 
FIRM ( I )=MON ( I ) 

16 CONTINUE 

WRITE(6,300 )FORv| 

V^RITE( 6,2 00 ) ( ( IMDN( I , J) , J = i, 7) ,I =1 , 12) 
V«RI TE( 6 ,401 ) 

401 FORMAT ( IHl ,2X ,////, 17X, • TABLE OF 

Dj 17 1 = 1,3 
FORM( I ) =YEI I ) 

17 CONTINUE 
WRIT£(6,300 )FORM 

WRITE(6,2C0) ((lYEAd ,J) , J= 1 , 7) , I = 1 , 4) 
WRI TE (6,501) 

501 FORiMAT (1H1,2X ,////, 17X, • TABLE OF 

1//) 

DO 18 1=1 ,3 
FORM( I )= OCCUD ( I) 

13 CONTINUE 

WRI ^E( 6, 3 CO) FORM 

WRITE(6,2 00 ) ( (lOCCd, J ) , J = 1, 7) , 1= 1, 72) 

WR ITE( 6,6C1) 

601 FURMATi IHl ,2X ,//// ,17X ,' TABLE CF 

1 ,// J 

00 IS 1=1,3 
FOR^(I)=OEP(I ) 

19 CONTINUE 

WRITE(6,3C0) FORM 

WRI -E( 6 , 2 00) ((IOEP(I,J),J= 1,7) ,1 = 1,45) 
200 format (7X, 12, 5X, 13, 5X , I 3, 5X , I 3, 5X, I 3, 4X 
C 

C PLCT NUMBER »F ACCIDENT’S VS DAYS OF WEEK, 
C OCCUPATIONS AND DEP ART EM ENTS . 

C 

DO 8 J=l,5 



MON'^H S 



YEARS ',//) 



OCCUPATION ' , 



DEPAPTIENTS ' 



I 5, 2X,I 5) 
YEATS, MONTHS, 
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GO "■Q (91 ,92 ,93,94,95), J 

91 C3 3 1 = 1,4 
X( I )=I 

Y(I)=IYEA(I,2) 

Z( I J= lYEA ( 1,6 ) 

W( I)=IYEA (1,7) 

3 CONTINUE 
N=4 

GO TO 99 

92 CO 4 1 = 1,12 

X( I )=I 

Y(I) =IM0N(I,2 ) 

Z( I )= IMO^l (1,6 ) 

W( I )=IMON(I, 7) 

4 CONTINUE 
N = 12 

GO TO 99 

93 CO 5 1=1,7 

X( I )=I 

Y( I ) =IDAY (1,2) 

Z( I )= IDAY ( I, 6 ) 

W( I )=IDA Y( 1,7 ) 

5 CONTINUE 
N=7 

GO *0 99 

94 CO 6 1 = 1,72 

X( I )=I 

Y( I ) =IOCC (1,2) 

Z( I)=I0CC(I,6 ) 

W( I )=I0CC(I,7) 

6 CONTINUE 
N=7 2 

GO "^0 99 

95 CO 7 1 = 1,45 

XI I ) = I 

Yl I ) =IOEP ( 1,2 ) 
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Z(I )=IDEP(I,6) 

W( I )=IDEP( I, 7 ) 

7 C3NTINUE 
N=45 

WRITE(6,7 00) 

700 F3RM4T( IH I, ///) 

99 CALL PLOTP(X,Z,'l ,1 ) 

URI TE(6 ,700i 
CALL PLnTP(X, Y,M,2 ) 
WR ITE( 6,700) 

CALL PLOTP(X ,W,N,3) 

8 CONTINUE 
STOP 
E-'JD 
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PROGRAM "B" TO CALCULATE THE 



INTERARRIVAL TIMES 



C PROGRAM TO CALCULATE THE INTERARRIVAL TIMES 

^ j!s:{! ^ssf: Jjs :js:|s sit 4s :j5:*s:Js:!i :!« :j: 

c 

C ACCEPTS AS INPUT ~HE FILE FTOlFOOl 4NO 

C CALCULATES THE IN’ EP A'5 R IVA L TIMES OF THE 

C ACCIDENTS WHICH FILES INTO FILE FT02F001 

-ou »v ■vU. -Xt 5V -Uf ^ 5V ■vi^ "«*» ^ ^ ^ ^ wu 'ju y» vJU« -ju >ju wu >ju y# y# y* yu yu yp y» y^ yu y» 5V y» yu yu 

C 

c 

01 MENSICN tqt (100) , CIF(IOO), IMTAB( 12) 

C 

C IMTABd )=DAYS OF MONTH I 

DATA I MT A 8/ 31, 28, 31 , 30, 31, 30, 31, 31, 30, 31, 30, 31/ 
IMET=0 

40 IMET=IMET+1 

IC=C 
C 

C READ IN THE DAYS OF GCCURANCE OF thE ACCIOEN'^S 

20 REACH, 100) IY,IM,IC 

IF ( lY. EO .0 ) GO TO 30 

r 

Vy 

C CALCULATE THE CORRE S PCNOI NO JULIAN CAY 

IC = IC+1 
IM= IM-1 
IDA Y=0 

IF (IM, EQ.O) GO ^0 10 

00 1 1=1, I M 

I0AY= lOAY + IMT AS ( I ) 

1 CONTINUE 

10 IDAY=IDAY+ID 

IF d'^E" .E0.2 .AMD. IM .GT .2 ) IDAY= I0AY+ 1 
TOT ( IC)=IDAY 
GO TO 20 
C 

C CALCULATE THE INTERARRIVAL TIMES 

30 DIF(l)=T0Tm 
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c 

C WRITES IN“0 FILE 2 IN'ERARRIVAL TIMES 

WRITE(2,200> 
kRITE ( 2,200) DIF ( 1 ) 

00 2 I=2,IC 

DIF( I)=TOT( I )-T0T( I-l) 

WRI TE( 2 ,2C0) DIF(I) 

200 F0RVA-(F5.1J 

2 C3NT INJ E 

C 

C TAKE CARE OF LEAP YEAR 

IF (I ME^. GE.4 ) GO TO 55 

GO TO A-0 

100 FORMAT! 3( 12, 2X) ) 

55 STQo 

END 
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PROGRAM "C" TO PRODUCE HISTOGRAMS 
AND PERFORM K-S TESTS 
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:-t 2 ^ :*s ^ :^c :^s :jc -c sjr :{s jjs :^s jJ; :*s s|c :*c 5*s 3 }; ^ 2*c ?*s 2 }; 5{s jjc ^ 

C* THIS PROGRAM ACCEPTS AS INPUTS THE INTERARRIVAL TI^ES =«= 
C* AND PRCDUCE FOR EACH YEAR CORRESPONDING HISTOGRAMS; * 
C=i‘EMP IRIC AL PDF JSTATISTICS AND PERFORM K_S TEST GOODNESS* 
C* OF FIT WITH EXPONENTIALS OF GIVEN LA^'DAS. * 

(2 * *:{5 ** *5|S * :js5;5#:!5 :ji * j|s jjs sjt:;: -t# i{! *4* « s!« sjs ^iis * 5is ** :!= ’!■ 

C 

r 

C 

DIMENSION X( ICO) , VLAM( 4) ,PDIF (6) 

EXTERNAL PDF 
CGMNCN / LAMOA/VL 
C 

C GIVE LAMDA FOR EACH YEAR 

DATA VLAM / , 1 545 , .23093 , . 1935 4, . 1 95 5 / 

IMET=0 

20 IMET=IMET+1 

VL = VLAM ( ImeT ) 

IC=0 

10 IC=IC+1 

c 

C READ IN INTER ARR I VA L TIMES 

REAC(2,100) XdC) 

100 F0RVAT(F5.1) 

IF (X( IC I .ME.O . ) GO TO 10 
IC= IC-1 
C 

C USE OF LIBRARY 5'JBRCU'^INES TO PRODUCE HISTOGRAMS 

C AMO PERFORM K-S GOODNESS OF FIT TESTS 

CALL HISTFIX, IC,0) 

CALL NKSl (PCF,X,IC,FDIF,I£R) 

WRITE(6,200 ) (dDIFI I ), 1 = 1,6), IER 
200 F0RMAT(2X,6F3.4, 15) 

IF( IMET.LT.4) GO ^0 20 

STOP 

E^)0 
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c 

C SUBROUTIME RECUIREO 6Y ""HE NKSl LIBRARY SUBPOUTINE 

C CALCULATE THEIR ITICAL VALUE FOR EXPGNEMTIAL 

SUBROUT IM E PDF( X, Y) 

CJMMOri /LAMDA/VL 
Y=1 .0-(EX F(-VL*X) ) 

RETURN 

END 
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COMPUTER FILE FTOlFOOl 



"DATA CODED" 
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FILE F“01F001 

jS * 4 « 4« sits!* 5|t« * 5|= ««❖***!!!!(=« « 

OCCUPATIONAL INJURIES AND ILLNESSES DATA CF N.P.G.S. 

THAT HAVE BEEN CODEC JMDEP FILE FTOiFOOi AS FOLLOWS 
A=YEARtB=VONTH,C=DAYf D=OAY OF THE W EEK( 1= SUNDA Y, E TC . ) 
E=OCCUPATION{ SEE OCCUPATION CODE) ,F =DEPARTNEN'^ ( S EE CEF CODE) 
G=OSHA INJURY CCOEISEE CSHA CODE ) , H=T OT A L WORKDAYS LOST 
I=PARTIAL WORKDAYS LOST 

^ «JUr JU ^ ^ ^ -J. ^ ^ 'iX "X <»U «X» <JU ^ «JU WU «JU ^ ^ <»U «U <Xr ■«<«> -JL» <ju> ^ •JU <Xr wL> Jk# ^ "Jf ■X» -JU «v ■**»■ 

A eCOEFGHI 

-JVU«-JUwU«U<JU^ <X<X. .JL. <JL- <JO <JU a»<JUUU«U«UU^JU 
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